70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4840}, 0x4040) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) 05:35:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x73}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48804}, 0x20004820) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) (async, rerun: 32) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r4) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x5c, r5, 0x200, 0x70bd25, 0x7fffffff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xcc30}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x24}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x843) (async) bpf$MAP_CREATE(0x4, 0x0, 0x7) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf251000000008003c000100000005002d00f80100000008003b0009000000050037000100000008002b000fca0000080034000900000000000000000000bba09428095cec33cc75724218f21449e183ea84ea111ddd7677bfea2e1a7f5a62c737696029c185f39c385270b80cf26a224d8dddc4de211bfa24df29d0ef89598a1d2d53b27c59000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40085) 05:35:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x80, 0x60, 0x101, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) 05:35:35 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80000001, 0x0, 0x1ff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x80, 0x60, 0x101, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x80, 0x60, 0x101, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) (async) 05:35:35 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4840}, 0x4040) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:35 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x5) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x1ff, 0x0}, 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x1, 0x100, 0x100}) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000140)=0x400, &(0x7f0000000180)=0x4) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f00000002c0)={{0x3, 0xffffffff, 0x7f, 0x42f4, 0x6, 0x5}, 0x379, [0x2, 0x3, 0x7ff, 0xa6, 0xfffffff8, 0xa000, 0x101, 0x80000000, 0xfffff451, 0x8, 0xfffffeff, 0x80000000, 0x8, 0x1, 0xf4, 0xfffffff8, 0x8, 0xb2, 0x1, 0x1, 0x9, 0x81, 0xfea, 0x40, 0x1, 0x5, 0x1, 0x8000, 0x7fffffff, 0x9, 0x0, 0x1, 0x9, 0x9, 0x3, 0x1, 0x6, 0x1, 0xffffffff, 0x4, 0x6, 0x98c, 0x11, 0x4, 0x9, 0x8, 0x6, 0x6, 0x8, 0xffffffff, 0x0, 0x6, 0x70bef619, 0x80, 0xf8, 0x3, 0x3, 0x0, 0x5, 0x7, 0x0, 0x10000, 0x3ff, 0x7, 0x1, 0x2, 0xffffffff, 0x4, 0xffffff00, 0x3, 0x2, 0x400, 0x0, 0x10000, 0x4, 0x1000, 0x57, 0x4, 0xf923, 0x6, 0x4, 0x2, 0x8, 0x2, 0xc40bd8a6, 0x820, 0x2, 0x39d6cec5, 0x9, 0xe5e2, 0xb86, 0x4, 0x4, 0x6, 0xb621, 0xffffffff, 0xde9d, 0x5, 0xfff, 0x34, 0x20, 0x9, 0x5, 0xfa7, 0x2, 0xe2, 0x6, 0xe7, 0x9, 0x9, 0x905, 0x3, 0x3, 0x7, 0x2, 0x9, 0x2, 0x9, 0x401, 0x2, 0xb43, 0xa4b2, 0x5f45, 0x2, 0x4, 0x9, 0x1, 0x61f, 0x81, 0xfffffccb, 0x0, 0xffffffff, 0x400, 0xfffffff8, 0x7fffffff, 0x1, 0xf6, 0x2, 0x5, 0x5, 0x8, 0x400, 0x6, 0x5, 0x81, 0x7f, 0x5, 0x200, 0x401, 0x46, 0x3, 0x6, 0x6ef, 0xc7, 0x3, 0x1, 0x5, 0x8, 0x200, 0x6, 0x45838110, 0x1, 0x1, 0xff, 0x9, 0x3, 0xfff, 0x8, 0x1, 0x1000, 0x7db878b, 0xe65, 0x2, 0x8001, 0xb18c, 0x4, 0x7fffffff, 0x7, 0x9, 0xffffff00, 0x2, 0x9, 0x7, 0x3, 0x1000, 0x5, 0x2c, 0x4, 0x7fff, 0xe6dd, 0x4, 0x9140, 0x3, 0x9, 0xffffff00, 0xff, 0x3ff, 0x6, 0x1, 0xa8, 0x32, 0x10000, 0x719, 0x837, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x3f, 0x6f6307aa, 0x7fffffff, 0xffff, 0x400, 0x5, 0x3, 0x9, 0x22, 0x0, 0x1, 0x3f, 0xff000000, 0x1f, 0x3, 0x9, 0x8000, 0xff, 0x7, 0x100, 0x1f, 0x3, 0x3, 0x3, 0x7ff, 0x8893, 0xfffffff7, 0x7fff, 0x7fff, 0xe3, 0x7, 0x101, 0xfd, 0x9, 0x9, 0x401, 0xbeb8, 0x8, 0x7fffffff, 0x0, 0x2, 0xafa1, 0x7, 0x4, 0x4, 0x9, 0x81, 0x9, 0xc4, 0x4, 0x3, 0x9, 0x800, 0xfffffeff, 0x8, 0x101, 0x9dc1, 0x3, 0x0, 0xffffffff, 0x5, 0xa9a, 0x5, 0x615, 0x3, 0xfffffc00, 0x2, 0x1ff, 0x0, 0x57, 0x7f, 0x6, 0x2, 0x4, 0xfff, 0x80000000, 0x48d, 0x5, 0x3fff8, 0xfffffffc, 0x400, 0x1f908, 0x7f, 0xc11, 0x1, 0x6, 0x3, 0x41b, 0xe0f8, 0x2cb0000, 0xe553, 0x3f, 0x3, 0xc356, 0x8, 0x9, 0xfffffffd, 0x1, 0x8, 0x1, 0x5, 0x3f, 0x5, 0x2, 0x7f, 0xfffffffd, 0x7, 0x9f, 0xa51, 0x3, 0x81, 0x8, 0xffff, 0x7fffffff, 0x2, 0x100, 0x7, 0xfffffffa, 0x10000, 0xffffff80, 0xfffffffc, 0x2, 0x4, 0xffffffff, 0x6d, 0x992, 0x6, 0x401, 0x9, 0x7fff, 0x6, 0x8000, 0x7fff, 0x902, 0x80000000, 0x80, 0xfffffff7, 0xd1b, 0x9, 0x5, 0xb5, 0x62f, 0x1, 0xfffffff9, 0x9, 0x1f, 0x7, 0x0, 0x80000000, 0xfffffffa, 0x8, 0xdee, 0x8, 0x7f, 0x200, 0x1, 0x10001, 0x1c8d, 0x4, 0x0, 0x1, 0x400, 0x8, 0x100, 0x5, 0x81, 0x9dc3, 0xfffffff8, 0xe474, 0x0, 0x4, 0x3, 0x80000001, 0x4, 0x0, 0x7d, 0x9, 0x1, 0x81, 0x6a, 0x7, 0xfffffff8, 0x6, 0x4, 0x2, 0x9, 0xfff, 0x1ff, 0x66, 0x800, 0x6, 0x9, 0x400, 0x7d1, 0x4, 0x0, 0x1, 0x7, 0x9, 0x8, 0x5, 0x9, 0x3, 0xe4ff, 0x800, 0x8, 0x7, 0x7bcd, 0x0, 0x5, 0x400, 0x3, 0x2, 0x3, 0x9, 0xfc9, 0xcb13, 0x5, 0x800, 0x9, 0x5, 0x8, 0x4, 0x8, 0xdb70, 0x5, 0x1, 0x2, 0x9, 0x496b, 0x80000000, 0x1, 0x9, 0x7, 0x9, 0x2, 0x80, 0x6, 0x3, 0x1, 0x0, 0x459e, 0x5, 0x2, 0x5, 0xad, 0x2, 0x20, 0x1, 0x7, 0x8, 0xd46d, 0x0, 0xc1, 0x0, 0x9, 0x4, 0x2, 0x8001, 0x8, 0x8, 0x8000, 0x2, 0x80000000, 0x9, 0x5, 0xf4, 0x3e, 0x8, 0x30e1, 0x0, 0x0, 0x192bf4ab, 0x1, 0x5, 0x40, 0x1ff, 0x100, 0x1000, 0x0, 0x5, 0x6, 0x0, 0x1, 0xfff, 0x4, 0x4, 0x4, 0x9, 0x8, 0x8, 0x1, 0x3, 0x0, 0x1ff, 0x6, 0x6, 0x1, 0x0, 0x4, 0x2, 0x0, 0x6, 0x6, 0x0, 0x8, 0x3, 0x8f, 0x232, 0xdd3a, 0x3, 0x9, 0x3, 0x5, 0x8001, 0x400, 0x1ce7, 0x2, 0x800, 0x3, 0x7, 0xaa5f, 0x6c, 0x1, 0xb60a, 0xdb, 0x3f, 0x4, 0x2000000, 0x44cfe596, 0x3, 0xff, 0x9, 0x0, 0x4, 0x80000000, 0x1, 0x3, 0x7, 0x8, 0xffffffff, 0x7, 0x1, 0x7, 0x0, 0x5, 0x100, 0x2, 0xfff, 0x401, 0x5, 0x7, 0x5, 0x1, 0x3, 0x4f5, 0x9, 0xfffffffc, 0x80000001, 0x1, 0x0, 0xc55f, 0xff, 0x7ff, 0xfffffffd, 0x2b15, 0x3, 0x2, 0x0, 0x81, 0x5, 0x7, 0xffffffff, 0x5, 0x1000, 0x4, 0x9b16, 0x2, 0x8, 0x5798, 0x7, 0x40, 0x0, 0xb721, 0x7ff, 0x1, 0x9, 0xd1e4, 0x6, 0x9, 0x7, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x1, 0x81, 0x0, 0x2, 0xc423, 0x9, 0xa6e7, 0x10001, 0x1, 0x81, 0xff, 0x5, 0xff, 0xfff, 0x0, 0x6, 0xfff, 0x0, 0x5, 0xfffffffa, 0xfffffff8, 0x1, 0x0, 0xe05, 0x427, 0x3ff, 0x0, 0x10001, 0x32, 0x72, 0x7d, 0x1, 0x7677, 0x7f, 0x3, 0x1fd1, 0x8, 0x912a, 0x6, 0x10000, 0x0, 0x3f, 0x3, 0x4, 0x400, 0x7, 0xb5c, 0x10000, 0xe6, 0x4420, 0x3, 0x4, 0x0, 0x3, 0x0, 0x200, 0x8001, 0xfffff000, 0x800, 0x8, 0xc2, 0x100, 0x8, 0x200, 0x1656, 0x4, 0x0, 0x10000, 0x5, 0x6, 0x8000, 0x938, 0x80, 0x7fff, 0x8, 0x2, 0x1, 0x0, 0x9, 0x0, 0x80000000, 0x3, 0x6, 0x2, 0xffffffc1, 0xffffff00, 0x9, 0x7, 0x8, 0x4ee, 0x6, 0x3f, 0x3f, 0x121b, 0x51, 0xfffeffff, 0xffff8789, 0x8001, 0x3, 0x3, 0x6, 0x1000, 0x1, 0x67d, 0x40, 0x7fffffff, 0x9, 0x2, 0xf3, 0x6b0f62ad, 0xda3, 0x1f, 0x0, 0x7, 0x6, 0xfffffffd, 0x3, 0x9, 0x3c, 0xb924, 0x800, 0x6, 0x400, 0x1ff, 0x4, 0xefc, 0x0, 0x81, 0x6, 0x2, 0x4, 0xa5, 0x1, 0x20, 0x6, 0x7, 0x7, 0x8001, 0x58, 0x8, 0x0, 0xfffffff9, 0x100, 0xff, 0x10001, 0x4, 0x401, 0x5cd, 0x0, 0xd1ee, 0x1, 0x8001, 0x4, 0x1f, 0x7f, 0x4, 0x9a, 0x6, 0xffff0000, 0x10000, 0x81, 0x2, 0x0, 0xfc68, 0x5, 0x9, 0x8, 0x9, 0x2e, 0x7f, 0x5, 0x6, 0x5, 0xc00e, 0xce, 0x7, 0xffc00, 0x3ff, 0x80000000, 0x1000, 0x2, 0xfffff41f, 0x7, 0x7f, 0x4ee3b4ba, 0x8, 0x3ff, 0x2, 0xdef2, 0x5, 0x7fff, 0x8001, 0x0, 0x9c, 0x80, 0xb7, 0x1fa2576c, 0x40, 0x9, 0x9, 0xfffff1d4, 0x10001, 0x916d, 0x401, 0x5, 0x41, 0x200, 0xe9d, 0x4a20, 0xffffffff, 0x5, 0x7f, 0x1, 0x7, 0x9, 0x1000, 0x18, 0x5, 0x0, 0x7fffffff, 0x4, 0x400, 0x9, 0x3b, 0x9, 0x9, 0x2, 0xffff, 0x6, 0x400, 0xffffffff, 0x3, 0x6, 0x5, 0x1, 0xdc78, 0x5c3, 0x6, 0x10000, 0x80, 0x489c, 0x3, 0xf7a, 0x3, 0x1, 0x4e, 0x3, 0x4ee, 0x1, 0x8, 0xffffe529, 0x6, 0x0, 0x3, 0xffffffff, 0x4, 0x4, 0x7, 0x3, 0xffffffe1, 0x5, 0x5a1f, 0x6, 0x0, 0x6, 0x80000000, 0x1, 0x200, 0x7ff, 0x28, 0x6, 0x9, 0x6, 0x8, 0x6, 0x7, 0x7, 0x1ff, 0x8, 0x4, 0x7, 0x8, 0x9, 0x2, 0x8, 0x0, 0x80000, 0x1, 0x5, 0x7, 0x100, 0xfffffff7, 0x7, 0x2, 0x5, 0x9, 0x7fffffff, 0x0, 0x7, 0xe06, 0x62, 0x10001, 0x5869, 0xfff, 0x1f0, 0x4, 0x8, 0x90, 0x400, 0xec, 0x440f3a17, 0x7, 0x7, 0x8, 0xffffffff, 0x101, 0x7, 0x270, 0x5, 0x8, 0xdd, 0x8, 0x6, 0x400, 0x7, 0x4, 0x6, 0x3ff, 0x9, 0x5, 0x0, 0xfffffffd, 0x4, 0x2, 0x3, 0x7, 0x5, 0x74, 0x15f, 0x8, 0x87, 0x99, 0xe817, 0xb, 0x5, 0x101, 0xa86, 0x80000001, 0x200, 0xfffffffb, 0x0, 0xfff, 0x20, 0x3, 0x80000001, 0x40, 0x8, 0x0, 0x2, 0x9210a91, 0x7ff, 0xfff, 0xffffffff, 0x6, 0x7, 0x1287, 0x10000, 0x3, 0x8, 0x1, 0xfc000000, 0x1f, 0x7099, 0xfffffffe, 0x101, 0x1000, 0x3, 0x7fff, 0xffffffff, 0x9, 0xe5, 0x5, 0x1f, 0x1, 0x4, 0x9, 0x800, 0xffff, 0xfffffff7, 0x9, 0xffff, 0x2, 0x3, 0x4, 0x4, 0x7f, 0x1, 0x5, 0xfff, 0xfffffff7, 0x863, 0x7, 0xfffffff7, 0x97, 0x101, 0xfffff66a, 0x6aee, 0x6, 0x36, 0x7f, 0x400, 0x8000, 0x80000000, 0x2, 0x400, 0x211, 0x3, 0x800, 0xfa]}) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000000)={0x7fff}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x7, 0x10}, 0xc) 05:35:35 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80000001, 0x0, 0x1ff}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:35 executing program 1: prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async) bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={0x0, 0x2}) 05:35:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x73}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48804}, 0x20004820) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r4) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x5c, r5, 0x200, 0x70bd25, 0x7fffffff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xcc30}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x24}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x843) bpf$MAP_CREATE(0x4, 0x0, 0x7) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf251000000008003c000100000005002d00f80100000008003b0009000000050037000100000008002b000fca0000080034000900000000000000000000bba09428095cec33cc75724218f21449e183ea84ea111ddd7677bfea2e1a7f5a62c737696029c185f39c385270b80cf26a224d8dddc4de211bfa24df29d0ef89598a1d2d53b27c59000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40085) 05:35:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x80, 0x60, 0x101, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) 05:35:35 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffc71) 05:35:35 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80000001, 0x0, 0x1ff}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:35 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000080)={0x1, 0x2, 0x1f, 0x2, 0x10001, 0x8}) pipe(&(0x7f0000000000)) socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x60944df0, 0x7}) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) 05:35:36 executing program 0: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'veth0_to_batadv\x00', {}, 0x3}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2282, 0x0) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0xffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000040)={0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x800000000000008, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000100)={0x0, r1}) 05:35:36 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x980, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) getsockname(r2, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) bpf$MAP_CREATE(0x3, 0x0, 0x7) 05:35:36 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x17, 0x4) 05:35:36 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffc71) bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffc71) (async) 05:35:36 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000100)={0x2, 0xff, 0x7ff, 0x3, 0x2, 0x1, 0x2f1f, 0x8, 0x3}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={0x0, 0xc9000, 0x10001, 0x1, 0xd4c, 0x1, 0x6, 0x40, 0x3ba0679a, 0xea, 0x3ff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 05:35:36 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000080)={0x1, 0x2, 0x1f, 0x2, 0x10001, 0x8}) pipe(&(0x7f0000000000)) socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x60944df0, 0x7}) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000080)={0x1, 0x2, 0x1f, 0x2, 0x10001, 0x8}) (async) pipe(&(0x7f0000000000)) (async) socket(0x2, 0xa, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x60944df0, 0x7}) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) (async) 05:35:36 executing program 0: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'veth0_to_batadv\x00', {}, 0x3}) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2282, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0xffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000040)={0x3}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x800000000000008, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000100)={0x0, r1}) 05:35:36 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffc71) bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffc71) (async) 05:35:36 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x17, 0x4) 05:35:36 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000200)) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x980, 0x0) (async) r2 = socket$kcm(0x29, 0x7, 0x0) getsockname(r2, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) (async) bpf$MAP_CREATE(0x3, 0x0, 0x7) 05:35:36 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000100)={0x2, 0xff, 0x7ff, 0x3, 0x2, 0x1, 0x2f1f, 0x8, 0x3}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={0x0, 0xc9000, 0x10001, 0x1, 0xd4c, 0x1, 0x6, 0x40, 0x3ba0679a, 0xea, 0x3ff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000100)={0x2, 0xff, 0x7ff, 0x3, 0x2, 0x1, 0x2f1f, 0x8, 0x3}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={0x0, 0xc9000, 0x10001, 0x1, 0xd4c, 0x1, 0x6, 0x40, 0x3ba0679a, 0xea, 0x3ff}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) 05:35:36 executing program 0: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'veth0_to_batadv\x00', {}, 0x3}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2282, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0xffffffff}) (async) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000040)={0x3}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x800000000000008, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000100)={0x0, r1}) 05:35:36 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x6, 0x7fffffff, 0x5, 0x6, 0x80, 0x9}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008845}, 0x4000000) 05:35:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xff, 0x1, 0xe0000, 0x20, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x4}, 0x48) socket(0x1, 0x80005, 0x9) 05:35:36 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000080)={0x1, 0x2, 0x1f, 0x2, 0x10001, 0x8}) pipe(&(0x7f0000000000)) socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x60944df0, 0x7}) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000080)={0x1, 0x2, 0x1f, 0x2, 0x10001, 0x8}) (async) pipe(&(0x7f0000000000)) (async) socket(0x2, 0xa, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x60944df0, 0x7}) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) (async) 05:35:36 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x17, 0x4) bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x17, 0x4) (async) 05:35:36 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x980, 0x0) (async, rerun: 64) r2 = socket$kcm(0x29, 0x7, 0x0) (rerun: 64) getsockname(r2, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) (async) bpf$MAP_CREATE(0x3, 0x0, 0x7) 05:35:36 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x6, 0x7fffffff, 0x5, 0x6, 0x80, 0x9}) (async, rerun: 64) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008845}, 0x4000000) (rerun: 64) 05:35:36 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000100)={0x2, 0xff, 0x7ff, 0x3, 0x2, 0x1, 0x2f1f, 0x8, 0x3}) (async, rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={0x0, 0xc9000, 0x10001, 0x1, 0xd4c, 0x1, 0x6, 0x40, 0x3ba0679a, 0xea, 0x3ff}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 05:35:36 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x1) 05:35:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xff, 0x1, 0xe0000, 0x20, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x4}, 0x48) (async, rerun: 32) socket(0x1, 0x80005, 0x9) (rerun: 32) 05:35:36 executing program 4: socket(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd700006bde8d2d9f64c7500010604"], 0x24}}, 0x40000) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) 05:35:36 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x4, 0x4) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="f0350cad6fd66cd7accff048e9aa0574eb1fb752", 0x14}) 05:35:36 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x6, 0x7fffffff, 0x5, 0x6, 0x80, 0x9}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008845}, 0x4000000) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x6, 0x7fffffff, 0x5, 0x6, 0x80, 0x9}) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008845}, 0x4000000) (async) 05:35:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000140)=""/1, &(0x7f0000000180)=0x1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xff81}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000001}]}, 0x40}}, 0x2000c810) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x541b, 0x0) 05:35:36 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x4, 0x4) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="f0350cad6fd66cd7accff048e9aa0574eb1fb752", 0x14}) 05:35:36 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x1) 05:35:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xff, 0x1, 0xe0000, 0x20, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x4}, 0x48) socket(0x1, 0x80005, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xff, 0x1, 0xe0000, 0x20, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x4}, 0x48) (async) socket(0x1, 0x80005, 0x9) (async) 05:35:36 executing program 4: socket(0x2, 0xa, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd700006bde8d2d9f64c7500010604"], 0x24}}, 0x40000) (async) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) 05:35:36 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0xfffffd90) 05:35:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000140)=""/1, &(0x7f0000000180)=0x1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xff81}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000001}]}, 0x40}}, 0x2000c810) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x541b, 0x0) 05:35:36 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x1) bpf$MAP_CREATE(0x4, 0x0, 0x1) (async) 05:35:36 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x4, 0x4) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="f0350cad6fd66cd7accff048e9aa0574eb1fb752", 0x14}) 05:35:36 executing program 4: socket(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd700006bde8d2d9f64c7500010604"], 0x24}}, 0x40000) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) socket(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd700006bde8d2d9f64c7500010604"], 0x24}}, 0x40000) (async) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) (async) 05:35:36 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0xfffffd90) bpf$MAP_CREATE(0x2, 0x0, 0xfffffd90) (async) 05:35:36 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x56f080, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1, 0xb2, 0x7f, 0x1000, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0xa}, 0x48) 05:35:36 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='statm\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4810) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x808201, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000180)={0x39b3, 0x903, 0x6000000, 0x6, 0xb25a777, 0x40, 0x100000001}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x9c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3b}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {0x0}]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="0d8c6a42a6d4c08aba483ba6763e2c9678df94", 0x13) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000540)={r4, 0x6, &(0x7f0000000200)=[0x1ff, 0x5, 0x50f, 0x49b, 0xfff, 0x0], &(0x7f0000000240)=[0x6, 0xffffffff, 0x9, 0x1, 0x9, 0xeb8a, 0x4, 0x1, 0x1f], 0x55, 0x3, 0x0, &(0x7f00000004c0)=[0x3, 0x9, 0x10001], &(0x7f0000000500)=[0x20, 0x1000, 0x5e93072c, 0x80000000]}) 05:35:36 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffde8) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x505181) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x6, 0x8000, 0x80000001}) r2 = socket(0x2c, 0x4, 0x7fffffff) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x5, 0x2) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={0x0, 0x8}) 05:35:36 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0xfffffd90) 05:35:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000140)=""/1, &(0x7f0000000180)=0x1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xff81}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000001}]}, 0x40}}, 0x2000c810) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x541b, 0x0) 05:35:36 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x56f080, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1, 0xb2, 0x7f, 0x1000, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0xa}, 0x48) 05:35:36 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) getsockname(r1, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:36 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffde8) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x505181) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x6, 0x8000, 0x80000001}) r2 = socket(0x2c, 0x4, 0x7fffffff) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x5, 0x2) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={0x0, 0x8}) bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffde8) (async) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) (async) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x505181) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x6, 0x8000, 0x80000001}) (async) socket(0x2c, 0x4, 0x7fffffff) (async) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x5, 0x2) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={0x0, 0x8}) (async) 05:35:36 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='statm\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4810) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x808201, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000180)={0x39b3, 0x903, 0x6000000, 0x6, 0xb25a777, 0x40, 0x100000001}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x9c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3b}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {0x0}]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="0d8c6a42a6d4c08aba483ba6763e2c9678df94", 0x13) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000540)={r4, 0x6, &(0x7f0000000200)=[0x1ff, 0x5, 0x50f, 0x49b, 0xfff, 0x0], &(0x7f0000000240)=[0x6, 0xffffffff, 0x9, 0x1, 0x9, 0xeb8a, 0x4, 0x1, 0x1f], 0x55, 0x3, 0x0, &(0x7f00000004c0)=[0x3, 0x9, 0x10001], &(0x7f0000000500)=[0x20, 0x1000, 0x5e93072c, 0x80000000]}) bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='statm\x00') (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4810) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x808201, 0x0) (async) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000180)={0x39b3, 0x903, 0x6000000, 0x6, 0xb25a777, 0x40, 0x100000001}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x9c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3b}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="0d8c6a42a6d4c08aba483ba6763e2c9678df94", 0x13) (async) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000540)={r4, 0x6, &(0x7f0000000200)=[0x1ff, 0x5, 0x50f, 0x49b, 0xfff, 0x0], &(0x7f0000000240)=[0x6, 0xffffffff, 0x9, 0x1, 0x9, 0xeb8a, 0x4, 0x1, 0x1f], 0x55, 0x3, 0x0, &(0x7f00000004c0)=[0x3, 0x9, 0x10001], &(0x7f0000000500)=[0x20, 0x1000, 0x5e93072c, 0x80000000]}) (async) 05:35:36 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000080)={0x93, 0x3, 0x7ca2, 0x1, 0x93, 0xfffffffc, 0xfffeffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x3, 0x2, 0x4, 0x0, 0x7c}) 05:35:37 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x8, 0x3, 0x6, 0x13, 0x7, 0x400, 0x6, 0x128}) bpf$MAP_CREATE(0x2, 0x0, 0x7) pipe(&(0x7f0000000000)) 05:35:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x56f080, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1, 0xb2, 0x7f, 0x1000, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0xa}, 0x48) 05:35:37 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async) r1 = socket$kcm(0x29, 0x7, 0x0) getsockname(r1, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:37 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffde8) (async) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) (async) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x505181) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x6, 0x8000, 0x80000001}) (async) r2 = socket(0x2c, 0x4, 0x7fffffff) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x5, 0x2) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={0x0, 0x8}) 05:35:37 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='statm\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4810) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x808201, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000180)={0x39b3, 0x903, 0x6000000, 0x6, 0xb25a777, 0x40, 0x100000001}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x9c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3b}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {0x0}]}) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="0d8c6a42a6d4c08aba483ba6763e2c9678df94", 0x13) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000540)={r4, 0x6, &(0x7f0000000200)=[0x1ff, 0x5, 0x50f, 0x49b, 0xfff, 0x0], &(0x7f0000000240)=[0x6, 0xffffffff, 0x9, 0x1, 0x9, 0xeb8a, 0x4, 0x1, 0x1f], 0x55, 0x3, 0x0, &(0x7f00000004c0)=[0x3, 0x9, 0x10001], &(0x7f0000000500)=[0x20, 0x1000, 0x5e93072c, 0x80000000]}) 05:35:37 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000080)={0x93, 0x3, 0x7ca2, 0x1, 0x93, 0xfffffffc, 0xfffeffff}) (rerun: 32) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x3, 0x2, 0x4, 0x0, 0x7c}) 05:35:37 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x8, 0x3, 0x6, 0x13, 0x7, 0x400, 0x6, 0x128}) bpf$MAP_CREATE(0x2, 0x0, 0x7) pipe(&(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) (async) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x8, 0x3, 0x6, 0x13, 0x7, 0x400, 0x6, 0x128}) (async) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) pipe(&(0x7f0000000000)) (async) 05:35:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty, 0x6, 0x3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:37 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async) r1 = socket$kcm(0x29, 0x7, 0x0) getsockname(r1, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:37 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000080)={0x93, 0x3, 0x7ca2, 0x1, 0x93, 0xfffffffc, 0xfffeffff}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x3, 0x2, 0x4, 0x0, 0x7c}) 05:35:37 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffefc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x8, 0x3, 0x3, 0x1], 0x5, 0x800, 0x0, 0xffffffffffffffff}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2}, 0xe) 05:35:37 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x2) 05:35:37 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x8, 0x3, 0x6, 0x13, 0x7, 0x400, 0x6, 0x128}) (async, rerun: 32) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async, rerun: 32) pipe(&(0x7f0000000000)) 05:35:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty, 0x6, 0x3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty, 0x6, 0x3}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) 05:35:37 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x40000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0x8ff, &(0x7f00000001c0)=0x2) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000100)=""/46, &(0x7f0000000140)=0x2e) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x8000) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000002c0), 0x4) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240)) 05:35:37 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x2) 05:35:37 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffefc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x8, 0x3, 0x3, 0x1], 0x5, 0x800, 0x0, 0xffffffffffffffff}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2}, 0xe) bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffefc) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x8, 0x3, 0x3, 0x1], 0x5, 0x800}) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2}, 0xe) (async) 05:35:37 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0xaf, 0x7, @scatter={0x2, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000240)=""/147, 0x93}]}, &(0x7f0000000340)="6ce19f46072cc89fa77272300183f0ec73c3db8b69617a78d91a0a686ed0b58eb6ab87186fd9efe84725128acf5ad1c5d03409db0b3426b851f03495d52aa5655607ee3e94364f8903e9696d73673e278fc3b0a6d10dabfab2e9db4741455a38a465b940b1536a0fbaef09eee775baa1115ab7f7c65bf3747768b1863d6908af2e6c8c4a51e6626d7c80cca08d0cdc5ca50246fe87f36de86fb8fef66e06200a038c01b12b19a2ebf5fed19ed60d7d", &(0x7f0000000400)=""/16, 0x401, 0x10011, 0x2, &(0x7f0000000440)}) r0 = bpf$MAP_CREATE(0x2, 0x0, 0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xed}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x101, 0x5, 0x100, 0x880, r0, 0x3800000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0xf}, 0x48) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xdc2eeaf8ffdd701a}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x99c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x24fdf3dc9eade655) r5 = accept4(r1, &(0x7f0000000500)=@phonet, &(0x7f0000000580)=0x80, 0x80800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000005c0)) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r6, 0x2201, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000840)={'\x00', 0x79fb, 0x5, 0x1ff, 0xfff, 0xffffffffffffa4ac}) 05:35:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty, 0x6, 0x3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty, 0x6, 0x3}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) 05:35:37 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x40000) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0x8ff, &(0x7f00000001c0)=0x2) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000100)=""/46, &(0x7f0000000140)=0x2e) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x8000) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000002c0), 0x4) (async) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240)) 05:35:37 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x2) 05:35:37 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x600080, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:37 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffefc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x8, 0x3, 0x3, 0x1], 0x5, 0x800, 0x0, 0xffffffffffffffff}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2}, 0xe) 05:35:37 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0xaf, 0x7, @scatter={0x2, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000240)=""/147, 0x93}]}, &(0x7f0000000340)="6ce19f46072cc89fa77272300183f0ec73c3db8b69617a78d91a0a686ed0b58eb6ab87186fd9efe84725128acf5ad1c5d03409db0b3426b851f03495d52aa5655607ee3e94364f8903e9696d73673e278fc3b0a6d10dabfab2e9db4741455a38a465b940b1536a0fbaef09eee775baa1115ab7f7c65bf3747768b1863d6908af2e6c8c4a51e6626d7c80cca08d0cdc5ca50246fe87f36de86fb8fef66e06200a038c01b12b19a2ebf5fed19ed60d7d", &(0x7f0000000400)=""/16, 0x401, 0x10011, 0x2, &(0x7f0000000440)}) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x2, 0x0, 0x7) (rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xed}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x2) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x101, 0x5, 0x100, 0x880, r0, 0x3800000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0xf}, 0x48) (async) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xdc2eeaf8ffdd701a}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x99c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x24fdf3dc9eade655) r5 = accept4(r1, &(0x7f0000000500)=@phonet, &(0x7f0000000580)=0x80, 0x80800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000005c0)) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r6, 0x2201, 0x0) (async) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000840)={'\x00', 0x79fb, 0x5, 0x1ff, 0xfff, 0xffffffffffffa4ac}) 05:35:37 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x40000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0x8ff, &(0x7f00000001c0)=0x2) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000100)=""/46, &(0x7f0000000140)=0x2e) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x8000) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000002c0), 0x4) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240)) socket(0x2, 0xa, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x40000) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0x8ff, &(0x7f00000001c0)=0x2) (async) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000100)=""/46, &(0x7f0000000140)=0x2e) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x8000) (async) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000002c0), 0x4) (async) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240)) (async) 05:35:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xffffffff, 0x6, 0x4, 0x1c1, r1, 0xfffffffe, '\x00', 0x0, r2, 0x2, 0x0, 0x5}, 0x48) 05:35:37 executing program 1: ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000300), 0x3, 0x4a00) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x6, 0x80000000000ff}) bpf$MAP_CREATE(0x3, 0x0, 0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2e0581, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="7bebfc265352739420f148423f22c0bf8b7ed09095eee7720ca23d2b89711afe3a3c29d4339284e728e38af43c73be445d486381cd74d2b2e712e71ae7c158e0c2d5bf2633ef49e30861d5223ff2e815527b132dc77bfb8a74d9dae0d2", @ANYRES16=r3, @ANYBLOB="000326bd7000ffdbdf25120000000500300000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4040000) 05:35:37 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x600080, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:37 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffe9a) 05:35:37 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0xaf, 0x7, @scatter={0x2, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000240)=""/147, 0x93}]}, &(0x7f0000000340)="6ce19f46072cc89fa77272300183f0ec73c3db8b69617a78d91a0a686ed0b58eb6ab87186fd9efe84725128acf5ad1c5d03409db0b3426b851f03495d52aa5655607ee3e94364f8903e9696d73673e278fc3b0a6d10dabfab2e9db4741455a38a465b940b1536a0fbaef09eee775baa1115ab7f7c65bf3747768b1863d6908af2e6c8c4a51e6626d7c80cca08d0cdc5ca50246fe87f36de86fb8fef66e06200a038c01b12b19a2ebf5fed19ed60d7d", &(0x7f0000000400)=""/16, 0x401, 0x10011, 0x2, &(0x7f0000000440)}) r0 = bpf$MAP_CREATE(0x2, 0x0, 0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xed}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x101, 0x5, 0x100, 0x880, r0, 0x3800000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0xf}, 0x48) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xdc2eeaf8ffdd701a}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x99c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x24fdf3dc9eade655) r5 = accept4(r1, &(0x7f0000000500)=@phonet, &(0x7f0000000580)=0x80, 0x80800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000005c0)) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r6, 0x2201, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000840)={'\x00', 0x79fb, 0x5, 0x1ff, 0xfff, 0xffffffffffffa4ac}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0xaf, 0x7, @scatter={0x2, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000240)=""/147, 0x93}]}, &(0x7f0000000340)="6ce19f46072cc89fa77272300183f0ec73c3db8b69617a78d91a0a686ed0b58eb6ab87186fd9efe84725128acf5ad1c5d03409db0b3426b851f03495d52aa5655607ee3e94364f8903e9696d73673e278fc3b0a6d10dabfab2e9db4741455a38a465b940b1536a0fbaef09eee775baa1115ab7f7c65bf3747768b1863d6908af2e6c8c4a51e6626d7c80cca08d0cdc5ca50246fe87f36de86fb8fef66e06200a038c01b12b19a2ebf5fed19ed60d7d", &(0x7f0000000400)=""/16, 0x401, 0x10011, 0x2, &(0x7f0000000440)}) (async) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xed}, 0xc) (async) socket$netlink(0x10, 0x3, 0x2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x101, 0x5, 0x100, 0x880, r0, 0x3800000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0xf}, 0x48) (async) pipe(&(0x7f0000000680)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xdc2eeaf8ffdd701a}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x99c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x24fdf3dc9eade655) (async) accept4(r1, &(0x7f0000000500)=@phonet, &(0x7f0000000580)=0x80, 0x80800) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000005c0)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r6, 0x2201, 0x0) (async) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000840)={'\x00', 0x79fb, 0x5, 0x1ff, 0xfff, 0xffffffffffffa4ac}) (async) 05:35:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xffffffff, 0x6, 0x4, 0x1c1, r1, 0xfffffffe, '\x00', 0x0, r2, 0x2, 0x0, 0x5}, 0x48) 05:35:37 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffe9a) 05:35:37 executing program 1: ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000300), 0x3, 0x4a00) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x6, 0x80000000000ff}) bpf$MAP_CREATE(0x3, 0x0, 0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2e0581, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="7bebfc265352739420f148423f22c0bf8b7ed09095eee7720ca23d2b89711afe3a3c29d4339284e728e38af43c73be445d486381cd74d2b2e712e71ae7c158e0c2d5bf2633ef49e30861d5223ff2e815527b132dc77bfb8a74d9dae0d2", @ANYRES16=r3, @ANYBLOB="000326bd7000ffdbdf25120000000500300000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4040000) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) (async) syz_open_dev$dri(&(0x7f0000000300), 0x3, 0x4a00) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x6, 0x80000000000ff}) (async) bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2e0581, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="7bebfc265352739420f148423f22c0bf8b7ed09095eee7720ca23d2b89711afe3a3c29d4339284e728e38af43c73be445d486381cd74d2b2e712e71ae7c158e0c2d5bf2633ef49e30861d5223ff2e815527b132dc77bfb8a74d9dae0d2", @ANYRES16=r3, @ANYBLOB="000326bd7000ffdbdf25120000000500300000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4040000) (async) 05:35:37 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x800, 0x4) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x40000000000000d3, 0x1, 0x4, 0x0, 0x9}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) 05:35:37 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x600080, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x600080, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) 05:35:37 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffe9a) 05:35:37 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x800, 0x4) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x40000000000000d3, 0x1, 0x4, 0x0, 0x9}) (async, rerun: 64) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) (rerun: 64) 05:35:37 executing program 1: ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000300), 0x3, 0x4a00) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x6, 0x80000000000ff}) (async) bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2e0581, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="7bebfc265352739420f148423f22c0bf8b7ed09095eee7720ca23d2b89711afe3a3c29d4339284e728e38af43c73be445d486381cd74d2b2e712e71ae7c158e0c2d5bf2633ef49e30861d5223ff2e815527b132dc77bfb8a74d9dae0d2", @ANYRES16=r3, @ANYBLOB="000326bd7000ffdbdf25120000000500300000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4040000) 05:35:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async, rerun: 64) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xffffffff, 0x6, 0x4, 0x1c1, r1, 0xfffffffe, '\x00', 0x0, r2, 0x2, 0x0, 0x5}, 0x48) 05:35:37 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x3, 0x7}) bpf$MAP_CREATE(0x2, 0x0, 0x7) 05:35:37 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000040)={0x200, 0x3, 0x3, 0x2, &(0x7f0000000000)=[{0x4, 0x7, 0x1ff, 0x1ff}, {0x8000, 0x9, 0x4, 0x3}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil}) 05:35:37 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x280000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:37 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x3, 0x7}) bpf$MAP_CREATE(0x2, 0x0, 0x7) 05:35:37 executing program 0: syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x40841) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="9fc728c48c6f47e4beb7a478ce70640606f06e35a62f3827c2df64d8", 0x1c}, 0x1, 0x0, 0x0, 0x400c401}, 0x4000000) 05:35:38 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x10000, 0xaba], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000000c0)="366409bd06947aa88be3ad0dc36938772119a573d1d3d1ee89e0ad17e7a134da7f3b97736634865cc685ab72e900000000df5a233aa4c926261a2a64809ca002f01ff6e19958e1f0c575e2e6cc", 0x4d, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000000)={r2}) bpf$MAP_CREATE(0x3, 0x0, 0xffffffffffffffde) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000180)={0x3, 0x1, 0x10000}) 05:35:38 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000040)={0x200, 0x3, 0x3, 0x2, &(0x7f0000000000)=[{0x4, 0x7, 0x1ff, 0x1ff}, {0x8000, 0x9, 0x4, 0x3}]}) (async, rerun: 32) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil}) 05:35:38 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x280000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:38 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x3, 0x7}) (async) bpf$MAP_CREATE(0x2, 0x0, 0x7) 05:35:38 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x800, 0x4) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x40000000000000d3, 0x1, 0x4, 0x0, 0x9}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) 05:35:38 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x10000, 0xaba], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000000c0)="366409bd06947aa88be3ad0dc36938772119a573d1d3d1ee89e0ad17e7a134da7f3b97736634865cc685ab72e900000000df5a233aa4c926261a2a64809ca002f01ff6e19958e1f0c575e2e6cc", 0x4d, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000000)={r2}) bpf$MAP_CREATE(0x3, 0x0, 0xffffffffffffffde) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000180)={0x3, 0x1, 0x10000}) 05:35:38 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000040)={0x200, 0x3, 0x3, 0x2, &(0x7f0000000000)=[{0x4, 0x7, 0x1ff, 0x1ff}, {0x8000, 0x9, 0x4, 0x3}]}) (async, rerun: 32) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil}) 05:35:38 executing program 0: syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x40841) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="9fc728c48c6f47e4beb7a478ce70640606f06e35a62f3827c2df64d8", 0x1c}, 0x1, 0x0, 0x0, 0x400c401}, 0x4000000) 05:35:38 executing program 3: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4b96360f539e8aaf}, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x61}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004080) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4) bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffe65) 05:35:38 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x280000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:38 executing program 0: syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x40841) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) (async) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="9fc728c48c6f47e4beb7a478ce70640606f06e35a62f3827c2df64d8", 0x1c}, 0x1, 0x0, 0x0, 0x400c401}, 0x4000000) 05:35:38 executing program 5: ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)=ANY=[@ANYBLOB="590000c1be0504f8849f4c0e5c66c7acec6c45ef0921e9e625eba562a079158f12c5c81d18cb782a7be7f385c245dc38405b76a58c4319af09cf1a9e0aef1ef60c7b0400fb151c4dc967365314eeb0255c7b4e21e1aff9344de9ee1848"]) bpf$MAP_CREATE(0x4, 0x0, 0x7) 05:35:38 executing program 2: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000140)={0x1, 0x1, 0x7fffffff}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000100)={0x8, 0xa, &(0x7f0000000000)=[0x800, 0x401, 0x4, 0x7fff, 0x4, 0xf9, 0x2, 0x8968, 0x7ed, 0x2], &(0x7f0000000040)=[0x8, 0x8, 0x81, 0x9, 0x6, 0x2], &(0x7f0000000080)=[0xb5b5, 0x7f, 0x3, 0x5, 0x47, 0x7f, 0x7, 0x7f, 0x8001]}) 05:35:38 executing program 4: socket(0x2, 0xa, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x28) 05:35:38 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x10000, 0xaba], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000000c0)="366409bd06947aa88be3ad0dc36938772119a573d1d3d1ee89e0ad17e7a134da7f3b97736634865cc685ab72e900000000df5a233aa4c926261a2a64809ca002f01ff6e19958e1f0c575e2e6cc", 0x4d, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000000)={r2}) bpf$MAP_CREATE(0x3, 0x0, 0xffffffffffffffde) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000180)={0x3, 0x1, 0x10000}) 05:35:38 executing program 3: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4b96360f539e8aaf}, 0x4000800) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x61}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004080) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4) (async) bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffe65) 05:35:38 executing program 5: ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)=ANY=[@ANYBLOB="590000c1be0504f8849f4c0e5c66c7acec6c45ef0921e9e625eba562a079158f12c5c81d18cb782a7be7f385c245dc38405b76a58c4319af09cf1a9e0aef1ef60c7b0400fb151c4dc967365314eeb0255c7b4e21e1aff9344de9ee1848"]) (async) bpf$MAP_CREATE(0x4, 0x0, 0x7) 05:35:38 executing program 2: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000140)={0x1, 0x1, 0x7fffffff}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000100)={0x8, 0xa, &(0x7f0000000000)=[0x800, 0x401, 0x4, 0x7fff, 0x4, 0xf9, 0x2, 0x8968, 0x7ed, 0x2], &(0x7f0000000040)=[0x8, 0x8, 0x81, 0x9, 0x6, 0x2], &(0x7f0000000080)=[0xb5b5, 0x7f, 0x3, 0x5, 0x47, 0x7f, 0x7, 0x7f, 0x8001]}) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000140)={0x1, 0x1, 0x7fffffff}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000100)={0x8, 0xa, &(0x7f0000000000)=[0x800, 0x401, 0x4, 0x7fff, 0x4, 0xf9, 0x2, 0x8968, 0x7ed, 0x2], &(0x7f0000000040)=[0x8, 0x8, 0x81, 0x9, 0x6, 0x2], &(0x7f0000000080)=[0xb5b5, 0x7f, 0x3, 0x5, 0x47, 0x7f, 0x7, 0x7f, 0x8001]}) (async) 05:35:38 executing program 4: socket(0x2, 0xa, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x28) 05:35:38 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/124) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:38 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) syz_open_dev$I2C(&(0x7f0000000000), 0x807, 0x44400) 05:35:38 executing program 3: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4b96360f539e8aaf}, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x61}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004080) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4) bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffe65) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4b96360f539e8aaf}, 0x4000800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x61}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004080) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4) (async) bpf$MAP_CREATE(0x2, 0x0, 0xfffffffffffffe65) (async) 05:35:38 executing program 5: ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)=ANY=[@ANYBLOB="590000c1be0504f8849f4c0e5c66c7acec6c45ef0921e9e625eba562a079158f12c5c81d18cb782a7be7f385c245dc38405b76a58c4319af09cf1a9e0aef1ef60c7b0400fb151c4dc967365314eeb0255c7b4e21e1aff9344de9ee1848"]) bpf$MAP_CREATE(0x4, 0x0, 0x7) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)=ANY=[@ANYBLOB="590000c1be0504f8849f4c0e5c66c7acec6c45ef0921e9e625eba562a079158f12c5c81d18cb782a7be7f385c245dc38405b76a58c4319af09cf1a9e0aef1ef60c7b0400fb151c4dc967365314eeb0255c7b4e21e1aff9344de9ee1848"]) (async) bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) 05:35:38 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) syz_open_dev$I2C(&(0x7f0000000000), 0x807, 0x44400) 05:35:38 executing program 4: socket(0x2, 0xa, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x28) socket(0x2, 0xa, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x28) (async) 05:35:38 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/124) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:38 executing program 2: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000140)={0x1, 0x1, 0x7fffffff}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000100)={0x8, 0xa, &(0x7f0000000000)=[0x800, 0x401, 0x4, 0x7fff, 0x4, 0xf9, 0x2, 0x8968, 0x7ed, 0x2], &(0x7f0000000040)=[0x8, 0x8, 0x81, 0x9, 0x6, 0x2], &(0x7f0000000080)=[0xb5b5, 0x7f, 0x3, 0x5, 0x47, 0x7f, 0x7, 0x7f, 0x8001]}) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000140)={0x1, 0x1, 0x7fffffff}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000100)={0x8, 0xa, &(0x7f0000000000)=[0x800, 0x401, 0x4, 0x7fff, 0x4, 0xf9, 0x2, 0x8968, 0x7ed, 0x2], &(0x7f0000000040)=[0x8, 0x8, 0x81, 0x9, 0x6, 0x2], &(0x7f0000000080)=[0xb5b5, 0x7f, 0x3, 0x5, 0x47, 0x7f, 0x7, 0x7f, 0x8001]}) (async) 05:35:38 executing program 3: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x2, 0x100, 0xa4b6}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000110}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abdd6008cf0ffe9ffff91145eeea9501cddd6acd00809afd8390984e78e04eaee902a9b356b7b9467613003fcc4492a40ce8fe5c73c4c11c68bfe923db8e9cc124cae34d7bb16624b563d34b3a7e700c19a74e3dee41af7d286b3"], 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x20008000) getsockname(r2, &(0x7f0000000080)=@caif=@util, &(0x7f0000000100)=0x80) bpf$MAP_CREATE(0x2, 0x0, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4, 0x2, 0xfffffff7, 0xb8e3, 0x400, 0xffffffffffffffff, 0x1000, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x48) 05:35:38 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/124) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/124) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) 05:35:38 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x807, 0x44400) 05:35:38 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x8f) 05:35:38 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x10, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0xfffff65d], 0x2, 0x80000}) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:38 executing program 2: syz_open_dev$sg(&(0x7f0000000040), 0x801, 0xe0041) socket$alg(0x26, 0x5, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200023, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:38 executing program 3: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x2, 0x100, 0xa4b6}) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000110}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abdd6008cf0ffe9ffff91145eeea9501cddd6acd00809afd8390984e78e04eaee902a9b356b7b9467613003fcc4492a40ce8fe5c73c4c11c68bfe923db8e9cc124cae34d7bb16624b563d34b3a7e700c19a74e3dee41af7d286b3"], 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x20008000) (async) getsockname(r2, &(0x7f0000000080)=@caif=@util, &(0x7f0000000100)=0x80) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4, 0x2, 0xfffffff7, 0xb8e3, 0x400, 0xffffffffffffffff, 0x1000, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x48) 05:35:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 05:35:38 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x8f) bpf$MAP_CREATE(0x4, 0x0, 0x8f) (async) 05:35:38 executing program 1: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x3, 0x0, 0xfffffffffffffde8) syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x12f001) 05:35:38 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x10, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0xfffff65d], 0x2, 0x80000}) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:38 executing program 3: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x2, 0x100, 0xa4b6}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000110}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abdd6008cf0ffe9ffff91145eeea9501cddd6acd00809afd8390984e78e04eaee902a9b356b7b9467613003fcc4492a40ce8fe5c73c4c11c68bfe923db8e9cc124cae34d7bb16624b563d34b3a7e700c19a74e3dee41af7d286b3"], 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x20008000) getsockname(r2, &(0x7f0000000080)=@caif=@util, &(0x7f0000000100)=0x80) bpf$MAP_CREATE(0x2, 0x0, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4, 0x2, 0xfffffff7, 0xb8e3, 0x400, 0xffffffffffffffff, 0x1000, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x48) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x2, 0x100, 0xa4b6}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000110}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abdd6008cf0ffe9ffff91145eeea9501cddd6acd00809afd8390984e78e04eaee902a9b356b7b9467613003fcc4492a40ce8fe5c73c4c11c68bfe923db8e9cc124cae34d7bb16624b563d34b3a7e700c19a74e3dee41af7d286b3"], 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x20008000) (async) getsockname(r2, &(0x7f0000000080)=@caif=@util, &(0x7f0000000100)=0x80) (async) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4, 0x2, 0xfffffff7, 0xb8e3, 0x400, 0xffffffffffffffff, 0x1000, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x48) (async) 05:35:38 executing program 2: syz_open_dev$sg(&(0x7f0000000040), 0x801, 0xe0041) (async) socket$alg(0x26, 0x5, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200023, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 05:35:38 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x8f) 05:35:38 executing program 1: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x3, 0x0, 0xfffffffffffffde8) syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x12f001) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) (async) bpf$MAP_CREATE(0x3, 0x0, 0xfffffffffffffde8) (async) syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x12f001) (async) 05:35:38 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x10, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0xfffff65d], 0x2, 0x80000}) (async, rerun: 64) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (rerun: 64) 05:35:38 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x232000) 05:35:38 executing program 2: syz_open_dev$sg(&(0x7f0000000040), 0x801, 0xe0041) socket$alg(0x26, 0x5, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200023, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x801, 0xe0041) (async) socket$alg(0x26, 0x5, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200023, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) 05:35:38 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xc3}) 05:35:38 executing program 1: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x3, 0x0, 0xfffffffffffffde8) (async) syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x12f001) 05:35:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 05:35:38 executing program 4: r0 = socket(0x22, 0x1, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:39 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xc3}) 05:35:39 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x84) 05:35:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x26}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8c5) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) getsockname(r5, &(0x7f0000000100)=@ieee802154={0x24, @short}, &(0x7f0000000180)=0x80) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0x541b, 0x0) 05:35:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x194, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x488}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c011}, 0x40001) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x7fffffff, 0x10}, 0xc) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000140)={0x3}) 05:35:39 executing program 4: r0 = socket(0x22, 0x1, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:39 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x232000) 05:35:39 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xc3}) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xc3}) (async) 05:35:39 executing program 4: r0 = socket(0x22, 0x1, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:39 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x84) bpf$MAP_CREATE(0x3, 0x0, 0x84) (async) 05:35:39 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x232000) 05:35:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x12) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x26}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8c5) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) (async) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) getsockname(r5, &(0x7f0000000100)=@ieee802154={0x24, @short}, &(0x7f0000000180)=0x80) (async, rerun: 32) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0x541b, 0x0) 05:35:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x194, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x488}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c011}, 0x40001) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}) (async, rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x7fffffff, 0x10}, 0xc) (async, rerun: 64) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000140)={0x3}) 05:35:39 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004851}, 0x40000) 05:35:39 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x84) 05:35:39 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 05:35:39 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8327, 0x2}, 0xe) 05:35:39 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000002700)='oom_adj\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002980)='net/netstat\x00') ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0xff}) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x4000000000002, 0xe40202) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100), &(0x7f0000000140)=[0x0], 0x1, 0x2, 0x0, 0x1}) 05:35:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x194, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x488}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c011}, 0x40001) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x7fffffff, 0x10}, 0xc) (async) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000140)={0x3}) 05:35:39 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 05:35:39 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8327, 0x2}, 0xe) 05:35:39 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004851}, 0x40000) socket(0x2, 0xa, 0x0) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004851}, 0x40000) (async) 05:35:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) (rerun: 64) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x26}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8c5) (async, rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) (async, rerun: 32) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) getsockname(r5, &(0x7f0000000100)=@ieee802154={0x24, @short}, &(0x7f0000000180)=0x80) (async) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0x541b, 0x0) 05:35:39 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000002700)='oom_adj\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002980)='net/netstat\x00') (async) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0xff}) (async) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x4000000000002, 0xe40202) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100), &(0x7f0000000140)=[0x0], 0x1, 0x2, 0x0, 0x1}) 05:35:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xb8, 0x1ff, 0x7, 0x0, 0x1, 0xd0c7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x2}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x8001) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) 05:35:39 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 05:35:39 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8327, 0x2}, 0xe) bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8327, 0x2}, 0xe) (async) 05:35:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xb8, 0x1ff, 0x7, 0x0, 0x1, 0xd0c7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x2}, 0x48) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x8001) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) 05:35:39 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004851}, 0x40000) 05:35:39 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000002700)='oom_adj\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002980)='net/netstat\x00') (async) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0xff}) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x4000000000002, 0xe40202) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100), &(0x7f0000000140)=[0x0], 0x1, 0x2, 0x0, 0x1}) 05:35:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000884) bpf$MAP_CREATE(0x2, 0x0, 0x7) 05:35:39 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 05:35:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xb8, 0x1ff, 0x7, 0x0, 0x1, 0xd0c7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x2}, 0x48) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x8001) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) 05:35:39 executing program 5: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0xe0, &(0x7f0000000200)=0x1) bpf$MAP_CREATE(0x4, 0x0, 0xb5a8) r0 = socket(0x1a, 0x3, 0x80000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) 05:35:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000884) bpf$MAP_CREATE(0x2, 0x0, 0x7) 05:35:39 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x32b94279ba20f389) 05:35:39 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 05:35:39 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000884) bpf$MAP_CREATE(0x2, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000884) (async) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) 05:35:39 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="49848057ba81"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0xfffffff9, 0xfffffffb, 0x7, 0x0, 0xffffffffffffffff, 0x5bab00, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x48) 05:35:39 executing program 5: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0xe0, &(0x7f0000000200)=0x1) bpf$MAP_CREATE(0x4, 0x0, 0xb5a8) (async) r0 = socket(0x1a, 0x3, 0x80000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) 05:35:39 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x32b94279ba20f389) 05:35:39 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 05:35:39 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:39 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x32b94279ba20f389) 05:35:39 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 05:35:39 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="49848057ba81"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}}, 0x4000010) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0xfffffff9, 0xfffffffb, 0x7, 0x0, 0xffffffffffffffff, 0x5bab00, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x48) 05:35:39 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x460101) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000040)={0x0, 0x3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x20009, 0x100, 0x80000001, 0x1, 0x9, 0x5, 0x1002, 0x6, 0x46, 0x4}) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x7ff, 0x39fd03cf, 0x325b, 0x5, 0xfffffff7, 0x0, 0x3}) 05:35:39 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:40 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0xfffffffffffffea4) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 05:35:40 executing program 4: r0 = socket(0x2, 0xa, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:40 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 05:35:40 executing program 5: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0xe0, &(0x7f0000000200)=0x1) (async, rerun: 64) bpf$MAP_CREATE(0x4, 0x0, 0xb5a8) (rerun: 64) r0 = socket(0x1a, 0x3, 0x80000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) 05:35:40 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x460101) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000040)={0x0, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x20009, 0x100, 0x80000001, 0x1, 0x9, 0x5, 0x1002, 0x6, 0x46, 0x4}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x7ff, 0x39fd03cf, 0x325b, 0x5, 0xfffffff7, 0x0, 0x3}) 05:35:40 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="49848057ba81"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0xfffffff9, 0xfffffffb, 0x7, 0x0, 0xffffffffffffffff, 0x5bab00, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="49848057ba81"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}}, 0x4000010) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0xfffffff9, 0xfffffffb, 0x7, 0x0, 0xffffffffffffffff, 0x5bab00, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x48) (async) 05:35:40 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0xfffffffffffffea4) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 05:35:40 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 05:35:40 executing program 4: r0 = socket(0x2, 0xa, 0x0) socket$alg(0x26, 0x5, 0x0) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x2, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x7, 0x8}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 05:35:40 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x460101) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000040)={0x0, 0x3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x20009, 0x100, 0x80000001, 0x1, 0x9, 0x5, 0x1002, 0x6, 0x46, 0x4}) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x7ff, 0x39fd03cf, 0x325b, 0x5, 0xfffffff7, 0x0, 0x3}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x460101) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000040)={0x0, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x20009, 0x100, 0x80000001, 0x1, 0x9, 0x5, 0x1002, 0x6, 0x46, 0x4}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x7ff, 0x39fd03cf, 0x325b, 0x5, 0xfffffff7, 0x0, 0x3}) (async) 05:35:40 executing program 5: bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffdcb) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001c011}, 0x30000004) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) 05:35:40 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0xfffffffffffffea4) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 05:35:40 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x1669451675488505) 05:35:40 executing program 4: r0 = socket(0x2, 0xa, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket(0x2, 0xa, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) 05:35:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x2, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x7, 0x8}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x2}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x7, 0x8}, 0xc) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) 05:35:40 executing program 5: bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffdcb) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001c011}, 0x30000004) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) (async) bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffdcb) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001c011}, 0x30000004) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) (async) 05:35:40 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) 05:35:40 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x1669451675488505) 05:35:40 executing program 1: r0 = bpf$MAP_CREATE(0x3, 0x0, 0x7) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x8000) 05:35:40 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x4, 0x10000, 0x9, 0xac], 0x4, 0x1800, 0x0, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080), 0x4) r2 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) 05:35:40 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) (async) 05:35:40 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x1669451675488505) 05:35:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x2, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x7, 0x8}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 05:35:40 executing program 5: bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffdcb) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001c011}, 0x30000004) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) (async) bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffdcb) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001c011}, 0x30000004) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) (async) 05:35:40 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x4, 0x10000, 0x9, 0xac], 0x4, 0x1800, 0x0, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080), 0x4) r2 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x4, 0x10000, 0x9, 0xac], 0x4, 0x1800}) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080), 0x4) (async) socket(0x2, 0xa, 0x0) (async) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) (async) 05:35:40 executing program 1: r0 = bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x8000) 05:35:40 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) (async) 05:35:40 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0xfeff) 05:35:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000000000}, 0x48) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0xc7d, &(0x7f00000000c0)=0x2) 05:35:40 executing program 1: r0 = bpf$MAP_CREATE(0x3, 0x0, 0x7) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x8000) 05:35:40 executing program 5: ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000001700)={&(0x7f0000001640)=[{0x5, 0x3200, 0x8d, &(0x7f0000000000)="333037fb029b3cfa938f9686ac949e968457b0c0e4dc566a2f3751235fc9d8e9ef3213d8f1cc98db2d50d65fe87f9fc19a8e9c9e38faac0e4d0bd57927c993033ba038cc7dff7b32ed1521c684d8035514af4e453278afbc433036a4816df7b1673d3ebfdca0f8b60bde9a2b185f4854cbfd750bbf8032b6713583007515631d0e6aaa46cae5b4057c6a664025"}, {0xffff, 0x0, 0x1000, &(0x7f00000000c0)="dd0a077aa3fcb24715c9ea212f30d6650eb9720c9bfc6af52a89f32fb4c83ed8bafb9c764cbc53d80acde05d3eab476887bae6a408114e8d1e64194d88b7a0f900f95dc4575c04a807865650c57bd9060413e5e0d1456c17046c113d8dd13b8bb102762c964cb592250991a0441a69aa34485ca0bd6a0f1ea024d2fd9c59f668e036a07a9945f7a2a1eff60eb428c3c4c684a9ea8764e75c120bef4de87f7119701344f0bc193fb14792a5838158c5f3bef1e74e40216ed5abdad6dcd2403f20c2062554691ebba2120ba697aba50f670e4dc117393a18c685dcff57525da6efa0b6d0e6ee648b2a76dcec33d7e70db982544abbece5bd2d5764fe6710dd253eed97d31f86ac67d41354559a3928f81a8dbd5c1cba555a7a5cf5ce57a2c7b0d483233f53b6d72f12aef3f03c68abe0ed76ce9c1e1bb9cfe00c79bc06d205d111438097aa753aab878a50cff04bddbe584d2a2f7ec581baa25958db204241909e267bea8042a9e6bbc77a6fdb9aa7fafd3f6833693ecdd8e98cb0f1e22dcc0aa5c2937464a9de962e976ae5011164ec40073da187700e226594ad5b1fadabff13ede89b61e0a542e5c8f593c74185b425dfbf620c6bea82f5cdffeac99d1bed6ee4d6dae644ce549f0da7dc7218cdd3ceb649b3baf300a21253d3ef83ee15d546b932ad8bef232a4ad95ececbef2d8bf6c5009e5085b0fe1ac71415e7dfe534188efc7b144ef0215e6523e1fde242ca3a60b31bab22dcc017235987cd4af56b2951323ec9136cbc98b81bd16e5059d38f6faf3b9f9b0aa32d87b9b3706f1f1d15717743b18139c73a8a5344a2bad8823b7883a5a64c3f9e92eca2ca98a245af9b6255a4d37b77c9d06c43790b5119a79f589988867cad9e1145baaa23a3d880b4f9dbdf802692a5e3b76c0d308d7535925fa8377d75f76bb493b0b76db8b25eec396401f8e374b72aeceafd209b87b20326d3c86da74cbd4751da3320987c11662755ebf959207ca8ff5f9f2ee307c521b64176975053edf5c3e0a478cb0e36b40556c44dffeaa2430249e2a4abb1da9cca631c34efd77f3c56c9abb64a6146fc0a0af05b69c46145ad6d98973fa5d9f30a754bbc35bdc5cc383c00b43e21628d41860885c9dd7fd222caf13273595d7a76124a78042b324274b77324ccf64874453f952a032735190a73ed8a587dd99f6abb322f973f661e9e88ba547fe01770d34ba32c52b313b2e7413d04c09b603d58be715f29d6f225c53a9b1cd202ed2bc398ec3e5dabbf4c0535f713ce84c6f68295fafb39f672b15c7373e0365f867812f653adb8217ff60562a1024a770bab1669e3c67a9e171082c80b40622b25d87e11530b168e0784c1c0b5cdc8927a51cf5abf2ac632090958f041cdfaeeac88b52ba62075e682845fa8e1b6ddb84f3df1a6de355b215036f15d69904faac5c78465c4fcda32bc4831ea90ed3cff8626bc6c165c45ecb92f45973636b22c13bdc9e45b8f8a8a5cd27314ae198111f018d6f440fb856cf0d2a6124ddf48489f16ac239d3a9b2e760ca14283635158ed0e74e48f1ada0242fc2e1f5acd708d96679ce5d0801fb89dcc4280869d97491a7823eef6c60812cb370b6e0f87fa2cc4b26f978885cbe56eaa4197a9eb75a6915cdafe37874900d94606b8a56632ec9a376dc6477c340030fd04a0152eb9b89bfefcb89ca0ec56b46b99cffb4448fa136d01bb3c5e3e436e8354fbd35c5909cb7e710697cfb8b59f4c3f6ce459a64847732cafdbe6bd6b15c0756621cf4330800c31eda81c18e19b163416159a693ba488a1f29ec2a9134b3c20ef7e041702adec9b4cd36c4897790d22650a296a4e66ad7ca8666f7cc294b88fe4c51a3d774ecafe407cace3777f1fb2188d7928b7c5f56f9b413fe527b0f21b88b6f89122e56a79c8578d111b6bccd54df9cec49854f718653ff9de3c48ef69c6b79a724980a0dde7a1053de585d6084234c4bff9d75cfe2c73c0a488e5ee01fca183e158a63bc4b90f8cb0fe28e362b5bb76e1bd1ad69c6f293baf7e1ae3baf343fde30c8b04f39ff5dfbb9a1ecf86bff5950ed1286e4aa0e4ef5300089badd7d4bbdfa9376c2c721a6535306934bdef17a65e46358e175e45f57b7701a481367fb3dd6c3ec90827aa14dc301d7234e947572ec9a99303849a603d97d8a079d619601274e7bbf185b91961c023cd042c2fe1303dda2cfdee57e9fa501c3bced732d3bce49f35083bd22ca286cbeda9d1b2c008ea0003f5a560f29365fbdec794ce6a3277f5b79b4ed09d61355da14f841806a356ea69d03ec532bfcd639db6663a36ce4abe11642fc185e6986b8d869ffc69c786074a8439772c8f99b8f9eab65bb6d6af12ae503e27f82c945a8c004edbe9cb816e535e62f3abbb260aca25e6180dcecfcc8fbb2c89033df27a480315c0b48b797328eac32015985966604f0d5c8cdf28494c5d4166ed021f37140abc5ecee8a35ba703b4f7e64ba3dbaacb67db8c4cefa30f8d4ee68ef654be085d279db29f77a3ac8f50a3de140c2e22124a17000fc9c8a64ba02487b7f2037270741a625b25e1e8762ee4f85ccf4478c9d78888ebfbbb4c3395be109e9a9c5ba8b231d81b0357cce4e3218f98b7474053caa0f5f089f731f19ec178d42e7b30f5dd2f37a5d60097aa3a1079b0ad727e91ce892f09514285b6a3ab0eca39da8502c18fa48434f83ab9ca9f3e477a50fb724bba3ae11650068a01e55aa30fb96b117730836e9ca48249927e0d20dd867614b7476c0bb1ebe81bb6ef04c627f3e0171fb5dca523c7e5f4fb25683f86e1e40fbaaf32fd0b1a500f8bc95efa1d2f6ea384d21b86b6844878d0010a75e70d3810ab3f40268fdf20601341a8e474873e5f87ddbc4a67c63f7eb68a950d103878fba02580be2b7c974c852f5f7933dcb4e108df25d238381346308f7887c08eb0494430f90b93910e5a91931929c5040268e07ee7cf208ad2aa798a3a87a03f1e9227660e445acc60f38ff7fec0b6297c299a21cfbf9a1cfab68bfffe10accff5070f3e41ab8c92f21c6353713ad47b76abc0afb96ce47e40740e8da65ee675a95d34944b88236901768cf741c51268facc250bc325e11946abebf378bf9fee8100e0e162fa63533fd0192fe0437e7ed6fb2dbeebc3f51abc27e1e8afd129c4a9465155832764342b14b6800b00ab1468840c2377b804559f8986b759f7b3171a25fe3ba8ca9964d586a0c92e9ed0740d87ec940bc195e23d8253bffdcfee3eac247894ac8c17f7826b08bac88788593b8ebc54b0fa3253665a6c9ac7b8df942bc23e94be4d1b859554ad1e9198bfd4986da813189d673a95c25277dfbd0470cf69436dcad7732f18219007818e46a99c462fda0586e8075cb0976e0c0beed83cc6409b31998840689bdb13b6f1131e4069217199678d750820005cb0417f4c444e34499bb52830b1d5321e2c40fb421d5c8e0db04ee0ef4ee4981b8ff90d53bbc46c1afc4c1c120be46c64c7a73bd0e35e2f178739fbfafe7ae193df8db5fd0fa4845cc73c067ad060d2f0b3e8acafc66bd5f6d9b8209feef6b4f5c88651a686b43e47048d090bdfa06fe15b68b01e28915682a9456f1bad6705aeea0c254688c5cf599fbdac7efef471588524c2cf55ccda553ad053fceb7d9170f94e696c68f53eef52bb148363f224ca95e4e84e37b094591b75d263fd6656b79379a5f7e444ade83aa77c879aa904fa5b534442d0564700b8329eb2aecfab261591c7bea43d6bb09830037f53e1dff6e740e7a3b945a6666d69d19b86982b539a767fc46884991a7d2cf89bd09ab41985764581b425cc1b18bb40fbdb2b606ca6cc7f1ad444c29d520b1b40e3dedc96db4523897d56e63bda966917c896e36b74747730d7f39d71c314cbed1661ce52ceb3082ca8d0543ec9abbb46efdfed784e995e560cfb00217ffd2221157aedf6badaef4b72acc0016ce6a74fb6cb93e8a1fb56321e0973b97c0d99aeecc797e5f2688bfb42b584ba1c95d769a5dfdd202aafe86c15a7215e7d9e047e11a2fd9d71a562d1f07519b5a85711b30deaaa7dc248fc027436ec3d24b4d9a8ea9e30855664edb37fd1d8b9a9cf8aba09ee6802c94a91f16749ebf38ccf29201eb68974ae9eeb024c61921cabca8469dabf7ca6afc6d41365f7da65b489ef67ef33b7bdec594a17321098b2b8e5668d5e221193d789e715eaf89297f38beb581d6c32e1fbec751c60041ec7243a1277f07a4ce9a2ca1e604fbef217d462d6d1b2a3a99a5c8892b79af86436d85189d40d17bd7e944d004c7bdc19eff3f2dc6d1c21fd19b94adc7bb29b09b0705fed7106ae967defc72eaa10dfc6bc4e89f9b233222f5b90dccc3a904e20faf277079729cd5a7672a8659b9fc6124bf72210a8c977cf9009d65eafd7eb9dfb169d3ef374c697c624c24be9862fbc1e42b162f0547ccb05e573672594cab8958393d08710f04c1a917baa76794e2a7876564d88ae7b46ed268c1ae6bd429e25c3dfcb159db02783c2170a53f88a50e4d7bf4de85bfe8a128b98150cc4fa51f5da86edeccd46eb4a3791512f5be0f8d25a356c0136631d6de61cccb76c32f84aca913e9928c9934873c3ab1a59ccb4b7f827ba6659cf703329896dd7a5f6245f81a6fe5d6addf74411db4dfa3c3313e263d0ed596ec23143f4d9ceb57248f832ab33eeb8987c8ea4e63864b1c074385bbc8b9fd04fe34572c21350ab01f71ba153b7a0c249178ea4cf080da32d2ec0e40ebd651ef9f720292a7bd40e6bf405dcf7b269ff87b6f01e2a672d6aabd70c1cf938bf546d62bc51a0130ebe9546302804ea0019bce7656c013ca5862e088335a31c42bc4fa7d53e831c77ed2cfd08460e4ebff3688b9c709d0ff82f8ddfa01bc4c85eddb89b4d982825e9fbc91140f83ce8735bd2057b4c5b879b8942b03876aab42fd88bfdcb42af2545d0013499a1a2e4ef76ef9f65e7b7770d34005725841af3b15d50b13d41e65ec5f87cebe85f827c919425d67620fafd9dd2cf7f5bd8e9700ded91219be49e5cf3800bd5e6ccc7ca5e4b7b805508cddceeb9ad04e0ebbe968c0b24cb5e8a905b55c4b5df3c5c95cf03904a9bcce73ce173a06af30ff0042a895365f3b2eb2d62c0a79c9264983598927335b776b4762ac850ea85e4f8ced41f852185d0a96806e3df05b4887c7ce6a9c60203dfab19cfbe1f9d5c037eb1fd9c343ceb43f549cd7636d44e0375adaab46c8aa91d48e6e9b716b33e4900691ef7886b381ca647fbbfd01b2bdab6b802bbd3a34f61715b730f702b852f83aa9fd9c7d79e0b61c0c2ad2f54fb45bb097a3c3fc8d8185dbe5a9bbe1f2bad10f7f06d9ef1368c8c73d15ecb769f7ce964e5094e0d77350059f1b2bd83ccd0c01fd064ec92b0e802b8100a61cc2174355fd65dda347d6cd275f08c4f6003a7400134cb95af99ed3c2499945aeba54faa7cfd30b5d4b713d14d3c76ae916996358450355d5fbbcff571a9b818968e5390960288f4315d37c3c77b5dfcdbb075c86922f1013567fa6b8e45e03a98e2b88f2cbd8cb802b029b6e2cdb7a3543e0f44081bb6f9a94775a1be6a7bbf16b9fd573652bfe64cca9012fd5771a4649433123312c9ad63aad248c4bbf7230bb81b40b3d21e7f3f5b56460d74666aa72748d4ef785728355fa102856932a4b65bae336dabb895af3c0b0d9d6548db38d730e8d74c378be69e179b793547c7bb2772bb5fb7e3d52a8ea6299c6c01ecaa17ba41b2c3c3c1ea5b0f5d2643ed7bcec3c50da8932b37f2"}, {0x4, 0x8010, 0xd8, &(0x7f00000010c0)="00bf1cf7bac08d84f9a54a25f1abbb341580a5b432ce94b2112a699e2d5b806612f9fa2f1334f29a79c918b115e45b33d6dccaf30e7b8897f2663d01a4f01916cc41d61fbafb68d1c17c3c92c76e6d818b6fc7477dfe8d3f78ce7626b9c8b183603bba1237926c82919ba5140bab0194762fb183320ae5b325a90281bfa625d9feb5bd75bdff0d36c92d68aac686ff65da5e49738c0be2a8efb1e915d2583f040f05bf4cf1546c1e2fa4c4ba983e592c140bbad14389d001bada5f310adff481f33255da149b1d293b4dde938cb8c13404e7fd85314cfb06"}, {0x22b, 0x4011, 0x97, &(0x7f00000011c0)="66114bcd6ad135b31800fd466fac825b03d6fe6fbc063783ee4857c0a19925cd77c1f15d7e769279dfb9310a9d3a928f9cf1c1a1f37713fd45342ffb8e4fa77c68f79b1252ebe2d0b7bf6b39e9e91601770b1cd995dafd6f48a90c27c6135f7f2497839eb7c6ab0a5b6c79027e715e5d1d066ec89461dbd8ea328f234a74576e9c69973188f788e623d619c61ff549690bbd646ba05b3b"}, {0xa53d, 0x1010, 0xab, &(0x7f0000001280)="91968a9bc7bb665f45ed8e53c7a4c5607fdea7a18b5af02ec5e78c0494a9aa2e74ade07192e8a1a1b6ca254d03a089ff1111b2f1f02bbe110530ac4bb8ffb15d4d81f15d391c6b074cabb97d5457b42145daaef8d57faa648d42638bc5e4446059bdeb9b96ccc6b24e52d403da6a74ae31b41b64180a3fe10b0d224f12bcc5793f98eed0b1b416d88dd7b3bd5a34072bed69541e67ba2a98ea3d6079ffa85cee70ad52126966c407f93896"}, {0x9, 0x0, 0x14, &(0x7f0000001340)="4ef485086063e9734a804d412b1154c248572457"}, {0x8, 0x8810, 0xc6, &(0x7f0000001380)="30708afc5cf9c177cfd7d5ae6291619c2b7b809ca0327834daa59ce2992e5fafd6c4e294da44b8e4f423caa4c5e6e137333b8c9c3ae8245ef9094847d6278c6a8de0061d93d7a6976f520eba2be9d81f1e70173a45d388b98b73275ed15339fc2f32b6c6330193d05816c92974cf7beeab59efc9dfc5f848775c9ef6ca50bf38c55ffd47650b5aad0638da8eb023d933b7f7e413e92414562af5c2e1d26d20965dd4db244e0e62befa589afd7236e621be6c3cf81357d324a691e6b8fdd61209ffb861392f07"}, {0x9, 0x400, 0xca, &(0x7f0000001480)="6d49f15e9dc1f42464d71724f2f4c5669b6d6193d70de2c537223a094982d51529eb66f2c05fafffb9ffb90b52d47a8b8fc475a4b9f7eb4869f438cf71c1b57d436ce33becd5891b8e3651b1b9bb2f085d1e1f6eeebba058176318ba4d437dad8d418fa7069eb85a83bb160fb70f6a88674277139640dd4bfd060cbba5ebb4e161064147300064c9d22297308bca72ae7547d1a6bd7c73059d85309adaebf1084da885169b5a7650940f32c2fe3bb7df13ff6a255dc744b2fb396128095498b0ddc860a21288960485e8"}, {0x5, 0x3810, 0x45, &(0x7f0000001580)="9548305ec3fded05a98f8f5d576c837e0ab6c0951318d98ea1ea9b5e80da7887e84d50b1b6402d01e446ce48b4650dce750f887de25705fe01e7b5ae29270c17a5d095e8d6"}, {0xd0, 0x1, 0x21, &(0x7f0000001600)="bae4a43d12da048f6cd2922aa43e5bd35bfdd66af94b56a10c5fc064b70530dc2a"}], 0xa}) 05:35:40 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0xfeff) 05:35:40 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x4, 0x10000, 0x9, 0xac], 0x4, 0x1800, 0x0, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080), 0x4) r2 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x4, 0x10000, 0x9, 0xac], 0x4, 0x1800}) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080), 0x4) (async) socket(0x2, 0xa, 0x0) (async) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) (async) 05:35:40 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x541b, 0x0) 05:35:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000000000}, 0x48) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0xc7d, &(0x7f00000000c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000000000}, 0x48) (async) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0xc7d, &(0x7f00000000c0)=0x2) (async) 05:35:40 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x541b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x541b, 0x0) (async) 05:35:40 executing program 4: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9d}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x2000001}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x40881) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000140)=0x1f, &(0x7f0000000180)=0x2) 05:35:40 executing program 5: ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000001700)={&(0x7f0000001640)=[{0x5, 0x3200, 0x8d, &(0x7f0000000000)="333037fb029b3cfa938f9686ac949e968457b0c0e4dc566a2f3751235fc9d8e9ef3213d8f1cc98db2d50d65fe87f9fc19a8e9c9e38faac0e4d0bd57927c993033ba038cc7dff7b32ed1521c684d8035514af4e453278afbc433036a4816df7b1673d3ebfdca0f8b60bde9a2b185f4854cbfd750bbf8032b6713583007515631d0e6aaa46cae5b4057c6a664025"}, {0xffff, 0x0, 0x1000, &(0x7f00000000c0)="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"}, {0x4, 0x8010, 0xd8, &(0x7f00000010c0)="00bf1cf7bac08d84f9a54a25f1abbb341580a5b432ce94b2112a699e2d5b806612f9fa2f1334f29a79c918b115e45b33d6dccaf30e7b8897f2663d01a4f01916cc41d61fbafb68d1c17c3c92c76e6d818b6fc7477dfe8d3f78ce7626b9c8b183603bba1237926c82919ba5140bab0194762fb183320ae5b325a90281bfa625d9feb5bd75bdff0d36c92d68aac686ff65da5e49738c0be2a8efb1e915d2583f040f05bf4cf1546c1e2fa4c4ba983e592c140bbad14389d001bada5f310adff481f33255da149b1d293b4dde938cb8c13404e7fd85314cfb06"}, {0x22b, 0x4011, 0x97, &(0x7f00000011c0)="66114bcd6ad135b31800fd466fac825b03d6fe6fbc063783ee4857c0a19925cd77c1f15d7e769279dfb9310a9d3a928f9cf1c1a1f37713fd45342ffb8e4fa77c68f79b1252ebe2d0b7bf6b39e9e91601770b1cd995dafd6f48a90c27c6135f7f2497839eb7c6ab0a5b6c79027e715e5d1d066ec89461dbd8ea328f234a74576e9c69973188f788e623d619c61ff549690bbd646ba05b3b"}, {0xa53d, 0x1010, 0xab, &(0x7f0000001280)="91968a9bc7bb665f45ed8e53c7a4c5607fdea7a18b5af02ec5e78c0494a9aa2e74ade07192e8a1a1b6ca254d03a089ff1111b2f1f02bbe110530ac4bb8ffb15d4d81f15d391c6b074cabb97d5457b42145daaef8d57faa648d42638bc5e4446059bdeb9b96ccc6b24e52d403da6a74ae31b41b64180a3fe10b0d224f12bcc5793f98eed0b1b416d88dd7b3bd5a34072bed69541e67ba2a98ea3d6079ffa85cee70ad52126966c407f93896"}, {0x9, 0x0, 0x14, &(0x7f0000001340)="4ef485086063e9734a804d412b1154c248572457"}, {0x8, 0x8810, 0xc6, &(0x7f0000001380)="30708afc5cf9c177cfd7d5ae6291619c2b7b809ca0327834daa59ce2992e5fafd6c4e294da44b8e4f423caa4c5e6e137333b8c9c3ae8245ef9094847d6278c6a8de0061d93d7a6976f520eba2be9d81f1e70173a45d388b98b73275ed15339fc2f32b6c6330193d05816c92974cf7beeab59efc9dfc5f848775c9ef6ca50bf38c55ffd47650b5aad0638da8eb023d933b7f7e413e92414562af5c2e1d26d20965dd4db244e0e62befa589afd7236e621be6c3cf81357d324a691e6b8fdd61209ffb861392f07"}, {0x9, 0x400, 0xca, &(0x7f0000001480)="6d49f15e9dc1f42464d71724f2f4c5669b6d6193d70de2c537223a094982d51529eb66f2c05fafffb9ffb90b52d47a8b8fc475a4b9f7eb4869f438cf71c1b57d436ce33becd5891b8e3651b1b9bb2f085d1e1f6eeebba058176318ba4d437dad8d418fa7069eb85a83bb160fb70f6a88674277139640dd4bfd060cbba5ebb4e161064147300064c9d22297308bca72ae7547d1a6bd7c73059d85309adaebf1084da885169b5a7650940f32c2fe3bb7df13ff6a255dc744b2fb396128095498b0ddc860a21288960485e8"}, {0x5, 0x3810, 0x45, &(0x7f0000001580)="9548305ec3fded05a98f8f5d576c837e0ab6c0951318d98ea1ea9b5e80da7887e84d50b1b6402d01e446ce48b4650dce750f887de25705fe01e7b5ae29270c17a5d095e8d6"}, {0xd0, 0x1, 0x21, &(0x7f0000001600)="bae4a43d12da048f6cd2922aa43e5bd35bfdd66af94b56a10c5fc064b70530dc2a"}], 0xa}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000001700)={&(0x7f0000001640)=[{0x5, 0x3200, 0x8d, &(0x7f0000000000)="333037fb029b3cfa938f9686ac949e968457b0c0e4dc566a2f3751235fc9d8e9ef3213d8f1cc98db2d50d65fe87f9fc19a8e9c9e38faac0e4d0bd57927c993033ba038cc7dff7b32ed1521c684d8035514af4e453278afbc433036a4816df7b1673d3ebfdca0f8b60bde9a2b185f4854cbfd750bbf8032b6713583007515631d0e6aaa46cae5b4057c6a664025"}, {0xffff, 0x0, 0x1000, &(0x7f00000000c0)="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"}, {0x4, 0x8010, 0xd8, &(0x7f00000010c0)="00bf1cf7bac08d84f9a54a25f1abbb341580a5b432ce94b2112a699e2d5b806612f9fa2f1334f29a79c918b115e45b33d6dccaf30e7b8897f2663d01a4f01916cc41d61fbafb68d1c17c3c92c76e6d818b6fc7477dfe8d3f78ce7626b9c8b183603bba1237926c82919ba5140bab0194762fb183320ae5b325a90281bfa625d9feb5bd75bdff0d36c92d68aac686ff65da5e49738c0be2a8efb1e915d2583f040f05bf4cf1546c1e2fa4c4ba983e592c140bbad14389d001bada5f310adff481f33255da149b1d293b4dde938cb8c13404e7fd85314cfb06"}, {0x22b, 0x4011, 0x97, &(0x7f00000011c0)="66114bcd6ad135b31800fd466fac825b03d6fe6fbc063783ee4857c0a19925cd77c1f15d7e769279dfb9310a9d3a928f9cf1c1a1f37713fd45342ffb8e4fa77c68f79b1252ebe2d0b7bf6b39e9e91601770b1cd995dafd6f48a90c27c6135f7f2497839eb7c6ab0a5b6c79027e715e5d1d066ec89461dbd8ea328f234a74576e9c69973188f788e623d619c61ff549690bbd646ba05b3b"}, {0xa53d, 0x1010, 0xab, &(0x7f0000001280)="91968a9bc7bb665f45ed8e53c7a4c5607fdea7a18b5af02ec5e78c0494a9aa2e74ade07192e8a1a1b6ca254d03a089ff1111b2f1f02bbe110530ac4bb8ffb15d4d81f15d391c6b074cabb97d5457b42145daaef8d57faa648d42638bc5e4446059bdeb9b96ccc6b24e52d403da6a74ae31b41b64180a3fe10b0d224f12bcc5793f98eed0b1b416d88dd7b3bd5a34072bed69541e67ba2a98ea3d6079ffa85cee70ad52126966c407f93896"}, {0x9, 0x0, 0x14, &(0x7f0000001340)="4ef485086063e9734a804d412b1154c248572457"}, {0x8, 0x8810, 0xc6, &(0x7f0000001380)="30708afc5cf9c177cfd7d5ae6291619c2b7b809ca0327834daa59ce2992e5fafd6c4e294da44b8e4f423caa4c5e6e137333b8c9c3ae8245ef9094847d6278c6a8de0061d93d7a6976f520eba2be9d81f1e70173a45d388b98b73275ed15339fc2f32b6c6330193d05816c92974cf7beeab59efc9dfc5f848775c9ef6ca50bf38c55ffd47650b5aad0638da8eb023d933b7f7e413e92414562af5c2e1d26d20965dd4db244e0e62befa589afd7236e621be6c3cf81357d324a691e6b8fdd61209ffb861392f07"}, {0x9, 0x400, 0xca, &(0x7f0000001480)="6d49f15e9dc1f42464d71724f2f4c5669b6d6193d70de2c537223a094982d51529eb66f2c05fafffb9ffb90b52d47a8b8fc475a4b9f7eb4869f438cf71c1b57d436ce33becd5891b8e3651b1b9bb2f085d1e1f6eeebba058176318ba4d437dad8d418fa7069eb85a83bb160fb70f6a88674277139640dd4bfd060cbba5ebb4e161064147300064c9d22297308bca72ae7547d1a6bd7c73059d85309adaebf1084da885169b5a7650940f32c2fe3bb7df13ff6a255dc744b2fb396128095498b0ddc860a21288960485e8"}, {0x5, 0x3810, 0x45, &(0x7f0000001580)="9548305ec3fded05a98f8f5d576c837e0ab6c0951318d98ea1ea9b5e80da7887e84d50b1b6402d01e446ce48b4650dce750f887de25705fe01e7b5ae29270c17a5d095e8d6"}, {0xd0, 0x1, 0x21, &(0x7f0000001600)="bae4a43d12da048f6cd2922aa43e5bd35bfdd66af94b56a10c5fc064b70530dc2a"}], 0xa}) (async) 05:35:40 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0xfeff) 05:35:40 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x10}, 0xc) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000100)={0x2, 0x3d3b, 0x0, 0x3fd, 0x2, 0x1, 0x47c5, 0x9, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x9, 0x9, 0x8000, 0x4, r0, 0x8, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xa}, 0x48) 05:35:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000000000}, 0x48) (async) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0xc7d, &(0x7f00000000c0)=0x2) 05:35:40 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x38) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x400002) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x7, 0x1, 0x5], 0x3, 0x0, 0x0, 0xffffffffffffffff}) accept$alg(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x60000) ioctl$I2C_RETRIES(r3, 0x701, 0xfffffffffffffff9) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r2, 0x11}, 0x10) 05:35:40 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x541b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x541b, 0x0) (async) 05:35:40 executing program 4: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9d}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x2000001}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x40881) (async) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000140)=0x1f, &(0x7f0000000180)=0x2) 05:35:40 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) (async, rerun: 64) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x10}, 0xc) (rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000100)={0x2, 0x3d3b, 0x0, 0x3fd, 0x2, 0x1, 0x47c5, 0x9, 0x2}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x9, 0x9, 0x8000, 0x4, r0, 0x8, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xa}, 0x48) 05:35:40 executing program 5: ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000001700)={&(0x7f0000001640)=[{0x5, 0x3200, 0x8d, &(0x7f0000000000)="333037fb029b3cfa938f9686ac949e968457b0c0e4dc566a2f3751235fc9d8e9ef3213d8f1cc98db2d50d65fe87f9fc19a8e9c9e38faac0e4d0bd57927c993033ba038cc7dff7b32ed1521c684d8035514af4e453278afbc433036a4816df7b1673d3ebfdca0f8b60bde9a2b185f4854cbfd750bbf8032b6713583007515631d0e6aaa46cae5b4057c6a664025"}, {0xffff, 0x0, 0x1000, &(0x7f00000000c0)="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"}, {0x4, 0x8010, 0xd8, &(0x7f00000010c0)="00bf1cf7bac08d84f9a54a25f1abbb341580a5b432ce94b2112a699e2d5b806612f9fa2f1334f29a79c918b115e45b33d6dccaf30e7b8897f2663d01a4f01916cc41d61fbafb68d1c17c3c92c76e6d818b6fc7477dfe8d3f78ce7626b9c8b183603bba1237926c82919ba5140bab0194762fb183320ae5b325a90281bfa625d9feb5bd75bdff0d36c92d68aac686ff65da5e49738c0be2a8efb1e915d2583f040f05bf4cf1546c1e2fa4c4ba983e592c140bbad14389d001bada5f310adff481f33255da149b1d293b4dde938cb8c13404e7fd85314cfb06"}, {0x22b, 0x4011, 0x97, &(0x7f00000011c0)="66114bcd6ad135b31800fd466fac825b03d6fe6fbc063783ee4857c0a19925cd77c1f15d7e769279dfb9310a9d3a928f9cf1c1a1f37713fd45342ffb8e4fa77c68f79b1252ebe2d0b7bf6b39e9e91601770b1cd995dafd6f48a90c27c6135f7f2497839eb7c6ab0a5b6c79027e715e5d1d066ec89461dbd8ea328f234a74576e9c69973188f788e623d619c61ff549690bbd646ba05b3b"}, {0xa53d, 0x1010, 0xab, &(0x7f0000001280)="91968a9bc7bb665f45ed8e53c7a4c5607fdea7a18b5af02ec5e78c0494a9aa2e74ade07192e8a1a1b6ca254d03a089ff1111b2f1f02bbe110530ac4bb8ffb15d4d81f15d391c6b074cabb97d5457b42145daaef8d57faa648d42638bc5e4446059bdeb9b96ccc6b24e52d403da6a74ae31b41b64180a3fe10b0d224f12bcc5793f98eed0b1b416d88dd7b3bd5a34072bed69541e67ba2a98ea3d6079ffa85cee70ad52126966c407f93896"}, {0x9, 0x0, 0x14, &(0x7f0000001340)="4ef485086063e9734a804d412b1154c248572457"}, {0x8, 0x8810, 0xc6, &(0x7f0000001380)="30708afc5cf9c177cfd7d5ae6291619c2b7b809ca0327834daa59ce2992e5fafd6c4e294da44b8e4f423caa4c5e6e137333b8c9c3ae8245ef9094847d6278c6a8de0061d93d7a6976f520eba2be9d81f1e70173a45d388b98b73275ed15339fc2f32b6c6330193d05816c92974cf7beeab59efc9dfc5f848775c9ef6ca50bf38c55ffd47650b5aad0638da8eb023d933b7f7e413e92414562af5c2e1d26d20965dd4db244e0e62befa589afd7236e621be6c3cf81357d324a691e6b8fdd61209ffb861392f07"}, {0x9, 0x400, 0xca, &(0x7f0000001480)="6d49f15e9dc1f42464d71724f2f4c5669b6d6193d70de2c537223a094982d51529eb66f2c05fafffb9ffb90b52d47a8b8fc475a4b9f7eb4869f438cf71c1b57d436ce33becd5891b8e3651b1b9bb2f085d1e1f6eeebba058176318ba4d437dad8d418fa7069eb85a83bb160fb70f6a88674277139640dd4bfd060cbba5ebb4e161064147300064c9d22297308bca72ae7547d1a6bd7c73059d85309adaebf1084da885169b5a7650940f32c2fe3bb7df13ff6a255dc744b2fb396128095498b0ddc860a21288960485e8"}, {0x5, 0x3810, 0x45, &(0x7f0000001580)="9548305ec3fded05a98f8f5d576c837e0ab6c0951318d98ea1ea9b5e80da7887e84d50b1b6402d01e446ce48b4650dce750f887de25705fe01e7b5ae29270c17a5d095e8d6"}, {0xd0, 0x1, 0x21, &(0x7f0000001600)="bae4a43d12da048f6cd2922aa43e5bd35bfdd66af94b56a10c5fc064b70530dc2a"}], 0xa}) 05:35:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1f, 0x0, 0x4, 0x9, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x401, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0xffffffff, 0xfffff083, 0x9, 0x1000, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x38000000, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) 05:35:40 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:40 executing program 4: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9d}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x2000001}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x40881) (async) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000140)=0x1f, &(0x7f0000000180)=0x2) 05:35:40 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x38) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x400002) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x7, 0x1, 0x5], 0x3, 0x0, 0x0, 0xffffffffffffffff}) accept$alg(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x60000) ioctl$I2C_RETRIES(r3, 0x701, 0xfffffffffffffff9) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r2, 0x11}, 0x10) bpf$MAP_CREATE(0x2, 0x0, 0x38) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x400002) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x7, 0x1, 0x5], 0x3}) (async) accept$alg(r1, 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) (async) syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x60000) (async) ioctl$I2C_RETRIES(r3, 0x701, 0xfffffffffffffff9) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r2, 0x11}, 0x10) (async) 05:35:41 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x10}, 0xc) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000100)={0x2, 0x3d3b, 0x0, 0x3fd, 0x2, 0x1, 0x47c5, 0x9, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x9, 0x9, 0x8000, 0x4, r0, 0x8, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xa}, 0x48) 05:35:41 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffe3c) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x8000) 05:35:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1f, 0x0, 0x4, 0x9, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x401, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0xffffffff, 0xfffff083, 0x9, 0x1000, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x38000000, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) 05:35:41 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) ioctl$I2C_RETRIES(r1, 0x701, 0x9) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_acct\x00') ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) 05:35:41 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:41 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x38) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x400002) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x7, 0x1, 0x5], 0x3, 0x0, 0x0, 0xffffffffffffffff}) accept$alg(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) (async) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x60000) ioctl$I2C_RETRIES(r3, 0x701, 0xfffffffffffffff9) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r2, 0x11}, 0x10) 05:35:41 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffe3c) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x8000) bpf$MAP_CREATE(0x4, 0x0, 0xfffffe3c) (async) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x8000) (async) 05:35:41 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0xcb) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x98e}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:35:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1f, 0x0, 0x4, 0x9, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x401, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0xffffffff, 0xfffff083, 0x9, 0x1000, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x38000000, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1f, 0x0, 0x4, 0x9, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x401, 0x8}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0xffffffff, 0xfffff083, 0x9, 0x1000, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x38000000, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) (async) 05:35:41 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) ioctl$I2C_RETRIES(r1, 0x701, 0x9) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_acct\x00') ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) socket(0x2, 0xa, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) (async) ioctl$I2C_RETRIES(r1, 0x701, 0x9) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_acct\x00') (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) (async) 05:35:41 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0xcb) (async) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x98e}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:35:41 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) 05:35:41 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffe3c) (async, rerun: 64) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x8000) (rerun: 64) 05:35:41 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) socket$alg(0x26, 0x5, 0x0) 05:35:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfa5f, 0x8, 0xffff, 0x105b, r0, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x3}, 0x48) 05:35:41 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0xcb) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x98e}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x3, 0x0, 0xcb) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x98e}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) 05:35:41 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xff3a) 05:35:41 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) ioctl$I2C_RETRIES(r1, 0x701, 0x9) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_acct\x00') ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) 05:35:41 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) socket$alg(0x26, 0x5, 0x0) 05:35:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfa5f, 0x8, 0xffff, 0x105b, r0, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfa5f, 0x8, 0xffff, 0x105b, r0, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x3}, 0x48) (async) 05:35:41 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={0xff8, 0x3ff, 0xffffff01, 0xc, 0x9, 0x8, 0xb90}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000080)={0xfffffffd, 0x9, 0xd82e, 0x101, 0x2}) 05:35:41 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xff3a) 05:35:41 executing program 1: r0 = bpf$MAP_CREATE(0x3, 0x0, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x7ff, 0x100, 0x1080, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0xd}, 0x48) 05:35:41 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) socket$alg(0x26, 0x5, 0x0) (async) 05:35:41 executing program 4: r0 = socket(0x3, 0x2, 0xfffffffc) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:41 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={0xff8, 0x3ff, 0xffffff01, 0xc, 0x9, 0x8, 0xb90}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000080)={0xfffffffd, 0x9, 0xd82e, 0x101, 0x2}) 05:35:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfa5f, 0x8, 0xffff, 0x105b, r0, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x3}, 0x48) 05:35:41 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xff3a) bpf$MAP_CREATE(0x4, 0x0, 0xff3a) (async) 05:35:41 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000226bd7000fbdbdf250400000005002d0000000000050037000000000028002a000000000005002a000000000008002c000300000008003a0000020000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x55) bpf$MAP_CREATE(0x2, 0x0, 0x7) 05:35:41 executing program 4: r0 = socket(0x3, 0x2, 0xfffffffc) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket(0x3, 0x2, 0xfffffffc) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) 05:35:41 executing program 1: r0 = bpf$MAP_CREATE(0x3, 0x0, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x7ff, 0x100, 0x1080, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0xd}, 0x48) bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x7ff, 0x100, 0x1080, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0xd}, 0x48) (async) 05:35:41 executing program 0: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 05:35:41 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={0xff8, 0x3ff, 0xffffff01, 0xc, 0x9, 0x8, 0xb90}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000080)={0xfffffffd, 0x9, 0xd82e, 0x101, 0x2}) 05:35:41 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffdf9) 05:35:41 executing program 4: r0 = socket(0x3, 0x2, 0xfffffffc) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:41 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000226bd7000fbdbdf250400000005002d0000000000050037000000000028002a000000000005002a000000000008002c000300000008003a0000020000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x55) (async) bpf$MAP_CREATE(0x2, 0x0, 0x7) 05:35:41 executing program 1: r0 = bpf$MAP_CREATE(0x3, 0x0, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x7ff, 0x100, 0x1080, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0xd}, 0x48) 05:35:41 executing program 0: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 05:35:41 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0xffffffffffffffb5) 05:35:41 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:41 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000226bd7000fbdbdf250400000005002d0000000000050037000000000028002a000000000005002a000000000008002c000300000008003a0000020000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x55) (async, rerun: 32) bpf$MAP_CREATE(0x2, 0x0, 0x7) (rerun: 32) 05:35:41 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e5650a7c9d94"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc7e2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x8006}, 0x8840) r1 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) 05:35:41 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffdf9) 05:35:41 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffdf9) 05:35:41 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) 05:35:41 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0xffffffffffffffb5) 05:35:41 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) 05:35:41 executing program 0: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 05:35:41 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e5650a7c9d94"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc7e2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x8006}, 0x8840) r1 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e5650a7c9d94"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc7e2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x8006}, 0x8840) (async) socket(0x2, 0xa, 0x0) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) (async) 05:35:41 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0xffffffffffffffb5) 05:35:41 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) 05:35:41 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfe0e) 05:35:41 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x81, 0x2, 0x25b], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x7881, 0x2, 0x2, r0, 0x6a0000, '\x00', r1, r2, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:41 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:42 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfe0e) bpf$MAP_CREATE(0x4, 0x0, 0xfe0e) (async) 05:35:42 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e5650a7c9d94"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc7e2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x8006}, 0x8840) r1 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e5650a7c9d94"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc7e2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x8006}, 0x8840) (async) socket(0x2, 0xa, 0x0) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) (async) 05:35:42 executing program 2: ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x220400, 0x0) 05:35:42 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x290000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5d9e33e1", @ANYRES16=r1, @ANYBLOB="200029bd7000fedbdf250600000008003200000000000500300001000000"], 0x24}}, 0x1) 05:35:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x81, 0x2, 0x25b], 0x3, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x7881, 0x2, 0x2, r0, 0x6a0000, '\x00', r1, r2, 0x2, 0x4, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:42 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) (async) 05:35:42 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) 05:35:42 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0xfe0e) 05:35:42 executing program 3: r0 = bpf$MAP_CREATE(0x2, 0x0, 0xffcb) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501601, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x7fff, 0x4, 0x5589, 0x0, r0, 0x4f6, '\x00', 0x0, r1, 0x5, 0x5, 0x4}, 0x48) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x9) 05:35:42 executing program 2: ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x220400, 0x0) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x220400, 0x0) (async) 05:35:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x81, 0x2, 0x25b], 0x3, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x7881, 0x2, 0x2, r0, 0x6a0000, '\x00', r1, r2, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:42 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x290000, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5d9e33e1", @ANYRES16=r1, @ANYBLOB="200029bd7000fedbdf250600000008003200000000000500300001000000"], 0x24}}, 0x1) 05:35:42 executing program 3: r0 = bpf$MAP_CREATE(0x2, 0x0, 0xffcb) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501601, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x7fff, 0x4, 0x5589, 0x0, r0, 0x4f6, '\x00', 0x0, r1, 0x5, 0x5, 0x4}, 0x48) (async) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x9) 05:35:42 executing program 5: ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x1) bpf$MAP_CREATE(0x4, 0x0, 0x7) 05:35:42 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) socket(0x2, 0xa, 0x0) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) (async) 05:35:42 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x66e182) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x1, 0x0, 0x7ff, 0x480, r1, 0x7, '\x00', 0x0, r1, 0x0, 0x2, 0x5}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) socket(0xb, 0x3, 0xfffffffb) 05:35:42 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) (async, rerun: 64) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x290000, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5d9e33e1", @ANYRES16=r1, @ANYBLOB="200029bd7000fedbdf250600000008003200000000000500300001000000"], 0x24}}, 0x1) 05:35:42 executing program 2: ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x220400, 0x0) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x220400, 0x0) (async) 05:35:42 executing program 5: ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x1) (async) bpf$MAP_CREATE(0x4, 0x0, 0x7) 05:35:42 executing program 3: r0 = bpf$MAP_CREATE(0x2, 0x0, 0xffcb) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501601, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x7fff, 0x4, 0x5589, 0x0, r0, 0x4f6, '\x00', 0x0, r1, 0x5, 0x5, 0x4}, 0x48) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x9) bpf$MAP_CREATE(0x2, 0x0, 0xffcb) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501601, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x7fff, 0x4, 0x5589, 0x0, r0, 0x4f6, '\x00', 0x0, r1, 0x5, 0x5, 0x4}, 0x48) (async) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x9) (async) 05:35:42 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) 05:35:42 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x66e182) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x1, 0x0, 0x7ff, 0x480, r1, 0x7, '\x00', 0x0, r1, 0x0, 0x2, 0x5}, 0x48) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket(0xb, 0x3, 0xfffffffb) 05:35:42 executing program 2: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r1}) 05:35:42 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) bpf$MAP_CREATE(0x3, 0x0, 0x15) 05:35:42 executing program 5: ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x1) bpf$MAP_CREATE(0x4, 0x0, 0x7) ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x1) (async) bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) 05:35:42 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r2, &(0x7f0000000100)=@phonet, &(0x7f0000000080)=0x80) 05:35:42 executing program 2: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r1}) 05:35:42 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="090000c6466f0f0ebc829ce68900", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250300000008003c0003000000050033000100000008003c0008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44091) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f00000000c0)=[0x1c3, 0x5, 0xdfc, 0x9, 0x3, 0x9ca7, 0x8, 0x401, 0x1], 0x9, 0x800, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x35}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048848}, 0x4040041) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0x4) 05:35:42 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x66e182) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x1, 0x0, 0x7ff, 0x480, r1, 0x7, '\x00', 0x0, r1, 0x0, 0x2, 0x5}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) (async) socket(0xb, 0x3, 0xfffffffb) 05:35:42 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="9a1de2cb347e3d831df09a6801635ac1c5a58386a4f738182ffb8be7e1cce042a60fa3fda3", 0x25) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) getsockname$netlink(r4, &(0x7f0000000040), &(0x7f0000000080)=0xc) 05:35:42 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) bpf$MAP_CREATE(0x3, 0x0, 0x15) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) (async) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) (async) bpf$MAP_CREATE(0x3, 0x0, 0x15) (async) 05:35:42 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r2, &(0x7f0000000100)=@phonet, &(0x7f0000000080)=0x80) 05:35:42 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="090000c6466f0f0ebc829ce68900", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250300000008003c0003000000050033000100000008003c0008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44091) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f00000000c0)=[0x1c3, 0x5, 0xdfc, 0x9, 0x3, 0x9ca7, 0x8, 0x401, 0x1], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x35}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048848}, 0x4040041) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0x4) 05:35:42 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5df7e6276f5659df}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf250100000006000e000900000006000300ea0500000c0010000500000000000000050005000100000053133fd7d217a0db1ff4784db90f56d997ab44f45d331e1f18eae6c169743750c99e3ee482a802f80096a598d330c8e27a42fc79dfbdad4186abf0735953efe664798a172f62dddc0cdd48282dead3124f3f8c93ae9e9a53f2763ed32ab7fff287f2a3f5b18cd9dd6bf1a641fb42f04acec1c7c04bc9616388c8ac0e4c0d66fa25f01a0f4d1d62791f441461d0013a115f26c5eef7369582bf75737aa2a15c6b52b45f4831eaa382711c5c69edc55dc52671d43e"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000001300)={0x1, 0x200, 0x8, 0xffff, 0x2, 0xffffffff}) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f00000002c0)={{0x1, 0xffffffff, 0x20, 0xac78, 0x7, 0x4}, 0x1d3, [0x6, 0xfffffc01, 0x0, 0x1, 0x8, 0x0, 0x9, 0x5e, 0x3, 0x5, 0x40, 0x7, 0x1, 0xfff, 0x5, 0x3fbc3c1b, 0x6, 0x7, 0x80000000, 0x3, 0x2, 0x1ff, 0xffffffff, 0x80000001, 0x7ff, 0x6, 0x2, 0x8, 0x3f, 0xa3e, 0x20, 0x5, 0xb36, 0x7fff, 0x5, 0x8, 0x7a, 0x9, 0x2, 0x10001, 0x1000, 0x7, 0x418f, 0x4, 0x8, 0x7, 0xb88, 0x101, 0x100, 0x2, 0x7ff, 0x9, 0x10001, 0x8, 0xfffffffe, 0x363e, 0x9, 0x7, 0xffffffff, 0x800, 0x5, 0x401, 0xfa, 0x2, 0x90, 0x3, 0x8, 0x7, 0x6, 0x9, 0x567, 0x20, 0x80000001, 0xb4, 0xa5, 0x20, 0xfffffffc, 0xffffffff, 0x1, 0x7, 0x7, 0xfffffe00, 0xfff, 0xfff, 0x6, 0x3ff, 0x1ff, 0x0, 0x8001, 0x3, 0x9, 0x5, 0x8001, 0x56c944b0, 0xfffffffb, 0x4, 0x100, 0x2, 0x8, 0x0, 0x4, 0x2, 0x7, 0x1, 0xfff, 0x5, 0x80000001, 0x1f, 0x757, 0x4, 0x100, 0x3, 0x101, 0x89, 0x80000000, 0x1, 0x7fffffff, 0x0, 0x1f, 0x49, 0x7ff, 0x1, 0x200, 0xffffff7f, 0x4, 0x80000001, 0x5, 0xfffffff8, 0x9, 0x2, 0x800, 0x8, 0x4, 0xfffffffd, 0x1, 0x80, 0x9, 0x0, 0x40, 0xd48, 0x1f50, 0xffffff09, 0x1, 0x3f, 0x0, 0x3, 0x401, 0x9, 0x5, 0xffffffff, 0x4, 0x0, 0x12, 0x96, 0x23, 0x6, 0xff, 0x9, 0x40, 0x4, 0xffff, 0x401, 0x1, 0xeb5f, 0x2d9a, 0x9, 0x2, 0x8, 0x7f, 0x6, 0x2, 0x80, 0x3, 0x2, 0x7, 0x3, 0x0, 0x0, 0x1, 0x7, 0x32, 0x4, 0x2, 0x90b8, 0x2, 0x0, 0x5229, 0x10000, 0xf3, 0x7fff, 0x4, 0x2, 0x6, 0x684f, 0x3ff, 0xa9a, 0x1f, 0x9ae, 0x3, 0x5, 0x7, 0x200, 0x7, 0x9be6, 0x1, 0x1f, 0x401, 0x401, 0x79, 0x1f, 0x400, 0x80000000, 0x0, 0x3, 0x7, 0x401, 0x0, 0x400, 0x81, 0xe9f, 0x10001, 0x0, 0x45, 0x2, 0x0, 0x7f, 0x800, 0x9, 0x10001, 0x4, 0xfffeffff, 0x0, 0x3c47, 0x7fffffff, 0x7f, 0x5, 0x3, 0xdf8, 0x4, 0x1, 0xffff, 0x768d, 0x80000001, 0x6b050e74, 0xa46, 0x8, 0x3, 0x5, 0x800, 0x400, 0x20e, 0x2, 0xffff8001, 0x51fb3317, 0xffffff80, 0x5, 0x2, 0x9, 0x3, 0x64, 0x9, 0x3, 0x80000001, 0x868, 0x9, 0x200, 0x3f, 0xfbd1, 0x4, 0x2, 0x7, 0x101, 0xffffffff, 0x8, 0x3, 0x1, 0x5, 0x5e, 0x4, 0x7fff, 0x9, 0x7, 0x0, 0x400, 0xfffffff7, 0x3, 0x800, 0xffff08eb, 0x6, 0x4, 0x4, 0x0, 0x7, 0x6, 0x3ba7, 0x1, 0x7fff, 0x46, 0x4, 0x1, 0x115e6303, 0x8001, 0x1ff, 0x3, 0x7, 0x3, 0x3, 0x7, 0xffffffff, 0x554, 0x0, 0xffffff01, 0x7, 0x10001, 0x97, 0x5601, 0x101, 0x3, 0x2, 0x6, 0x1, 0x5, 0x1, 0x1, 0x401, 0x4800, 0x3, 0x80, 0x8000, 0x10000, 0x8001, 0x2, 0x5f, 0x5, 0x8bd, 0x80000000, 0x2, 0x2, 0x7, 0xffffff80, 0xfffffffa, 0x7, 0x1ff, 0x7, 0x8, 0x7fffffff, 0x128, 0x0, 0xb, 0x7, 0x1ff, 0x3, 0x6, 0x1af5, 0x7, 0x2, 0x2, 0x3, 0x1000, 0x8, 0x1, 0x101f, 0x81, 0x94e, 0x7, 0x6, 0x401, 0x1, 0x9, 0xaed, 0x9, 0x6, 0x8, 0xff, 0x6, 0x260efb06, 0x0, 0x9, 0xa778, 0x7, 0x59, 0x9, 0x80000000, 0x800, 0xffffffff, 0x80000001, 0x5, 0x6, 0x800, 0x2, 0x1000, 0x8, 0x7, 0x1ff, 0xfffff000, 0x80000001, 0x5, 0x85b5, 0x9, 0x3ff, 0x4, 0x71, 0x138e, 0x3c, 0x6, 0x1, 0x6, 0xebdb, 0xcc2d, 0x1, 0xffff8000, 0xf464, 0x6, 0x5, 0xccb, 0x4, 0xffffff01, 0x9, 0xffffff2f, 0xea, 0x2, 0x4, 0xfc000000, 0x40, 0xfffffab7, 0x0, 0x5, 0x3, 0x80000000, 0xffff, 0x83dc, 0x9, 0xdd, 0x5, 0x81, 0x1, 0x1, 0x400, 0x81, 0x7f, 0xe54, 0xf6, 0x80, 0xb99, 0x400, 0xfffff801, 0x80000000, 0xffffffff, 0x10000, 0xfff, 0x4, 0x7ff, 0xfffffffd, 0x4, 0x4, 0x61, 0x2, 0x3, 0x3f, 0x80000001, 0x2, 0x32, 0x7, 0xfff, 0x92, 0x5, 0x6, 0x4, 0x800000, 0x0, 0x7, 0x6, 0x9, 0x8, 0x0, 0x4, 0x3f, 0x80, 0x8, 0x400, 0x3, 0x7fffffff, 0x9, 0x5, 0x20, 0x7ff, 0x1, 0x3ff, 0x5, 0x1000, 0x54f7, 0xffffffd5, 0x5, 0x5, 0xffffffb7, 0x3f, 0x8, 0xb8, 0x9, 0x8000, 0x2, 0x6, 0x9, 0xfffffff8, 0x3ba, 0x2, 0x3, 0x6, 0x7ff, 0xff, 0x8, 0x7, 0x7, 0x5, 0x7, 0xfffffffb, 0x0, 0xab35, 0x6, 0x1, 0xce1a, 0x5, 0xff, 0x81, 0x7f, 0x1, 0x8, 0x5, 0x7, 0x4, 0x401, 0x4, 0xfffffffe, 0xffffffff, 0x4, 0x800, 0x7d0, 0x311e, 0x1f, 0x1, 0x9, 0x8, 0x6, 0x7, 0x1, 0x40, 0x10001, 0x100, 0xffff6951, 0x9, 0x81, 0x0, 0x5, 0x36, 0x1, 0x80000000, 0xfffffe00, 0x1, 0x0, 0x80, 0x4, 0x0, 0x4, 0x5, 0x90, 0x9, 0x7d, 0xff, 0x2, 0x2, 0x7, 0x5713, 0x200, 0x80000000, 0x1, 0x7, 0x29, 0x51, 0x7, 0x400, 0x46c2, 0x400, 0x8001, 0x5, 0xb44, 0x4, 0x57f, 0x4, 0x8, 0x0, 0x7, 0x6, 0x4, 0xebf, 0x78, 0x8, 0x4, 0x1000, 0x1e, 0x0, 0x3, 0x3c2d6ae1, 0x10001, 0x5, 0x6, 0x9, 0x100, 0x6, 0x9, 0x1, 0x6076fe4c, 0x3, 0x6, 0x1, 0x4, 0x8, 0x3, 0x0, 0xd42, 0x7f, 0x9, 0x68a9, 0x0, 0x3, 0x401, 0x7fffffff, 0xc0fe, 0x7ff, 0x5, 0x0, 0x5, 0x5, 0x5, 0xfff, 0x1, 0x0, 0x4, 0x81, 0x8, 0x1d2, 0x8000, 0x200, 0x6, 0x5, 0x1, 0x4, 0x1, 0x1, 0x1, 0x12, 0x7, 0x2, 0x6, 0x4e, 0xe804, 0x8, 0x101, 0x7ff, 0x81, 0x9, 0x8, 0x6e61, 0x2, 0x4, 0x3, 0x6, 0x7fffffff, 0x6, 0x3ade, 0x9, 0x7fffffff, 0x10001, 0x89, 0x7f, 0x401, 0xaf18, 0x40, 0x5, 0x5, 0x4b, 0x8, 0x7, 0x4, 0x8, 0x10001, 0x7f1, 0x1, 0xf955, 0x8, 0x6, 0x100, 0x9d, 0x6, 0xffffffff, 0x401, 0x1, 0x1, 0x3, 0x0, 0x7fff, 0x8001, 0x5, 0xfffffff7, 0x3, 0x3ff, 0x20, 0xffffffc6, 0x7ff, 0x1, 0x6, 0x8, 0x3, 0x2, 0x9, 0x5, 0x200, 0x0, 0x1, 0x1f95c4e7, 0xfffffffe, 0x5, 0x5, 0x4, 0x9, 0xaf9, 0x5, 0x4, 0x8, 0x9, 0x1, 0x73f, 0x800, 0x5, 0xa82, 0x3, 0x0, 0x0, 0xffffffc1, 0xffffffff, 0x6, 0x3, 0x2, 0x8000, 0x9, 0xfffffffa, 0x8, 0x24, 0x2, 0x872, 0xff, 0xd45, 0x9, 0x1000, 0x6, 0xa9ce, 0x7, 0x0, 0xc6, 0x6, 0x1f800, 0x2c, 0xf570, 0x9, 0x20, 0x5, 0x80000000, 0x20, 0x8001, 0x80000000, 0x6, 0x7877, 0xe9, 0x10000, 0x24, 0x7, 0xfff, 0x0, 0x4, 0x7ba8, 0x7fffffff, 0x8, 0x6, 0x5, 0x1, 0x7, 0x8, 0x1bbc, 0x3f, 0x4, 0x101, 0x8, 0x67b9, 0x9, 0x8001, 0x800, 0x4, 0x2, 0x3, 0x0, 0x7, 0x7, 0xfffffffa, 0x8, 0xffffffff, 0x100, 0x9, 0x8, 0xea, 0x2, 0x8, 0xffffffff, 0x9, 0x8, 0xf025, 0x3, 0x7fff, 0xf4, 0x3, 0x2, 0xc5, 0x894, 0x10000, 0x8, 0x4, 0x2, 0x9e, 0x3, 0xfffff001, 0x800000, 0x72cc, 0x7fff, 0xfff, 0x3, 0x4, 0x30d, 0x3f, 0x3, 0x9, 0x2, 0x5, 0x2, 0xfffffff9, 0xeecd, 0x1, 0x5, 0x7ff, 0x5, 0xffffffc0, 0x4410d0a9, 0x7, 0x3, 0x401, 0x6d3, 0x37eb, 0x8, 0x9, 0x1, 0x1, 0xbb, 0x452, 0x8, 0x101, 0x2, 0x5, 0x9, 0x8, 0xffffde7b, 0x6, 0x5, 0x1, 0x3, 0x5, 0x4, 0x2, 0x3f, 0x0, 0x3ff, 0x6, 0x3, 0x7, 0x7fffffff, 0x5, 0x4, 0x7, 0x10000, 0x9, 0xfff, 0x100, 0x800, 0xfffffffb, 0x80000001, 0x5, 0x800, 0x1, 0x1969, 0x6, 0x0, 0xfffffffc, 0x90, 0x5df, 0x0, 0x6, 0xda8, 0x3, 0x0, 0x7f, 0x800, 0x2, 0x8970, 0x9, 0x7f, 0xbadb, 0x8, 0xc3b000, 0x7d95, 0x9, 0x3, 0xb2, 0x4, 0x6, 0x5, 0x80000001, 0x2, 0x7fffffff, 0xb5e5, 0x0, 0x5, 0x4, 0x0, 0x6c, 0x83, 0x6, 0x8, 0x4, 0x8, 0xe83b, 0x4, 0x2, 0x100, 0x9e, 0x1ff, 0x6, 0xfdbc, 0x3, 0x2, 0x6, 0xba, 0x8, 0x7, 0x6, 0x2, 0x3, 0x1, 0x2, 0x41b, 0xffffff80, 0x0, 0x7, 0x6, 0xffffe560, 0x76406410, 0x10000, 0x10000, 0x2, 0x7f, 0x7, 0x20000000, 0x189, 0x3, 0x2, 0x3, 0x7, 0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0x3, 0x0, 0x8001, 0x0, 0x8000, 0xffffffff, 0x7f, 0x8001, 0x1ff, 0x0, 0x0, 0x1288, 0x18840000, 0x3ff, 0xec12, 0x80000001, 0x1, 0x9, 0x3, 0x4, 0xfffffffb, 0x20, 0x7, 0x3, 0x7ff, 0xfffffffe, 0x20, 0x9, 0x1, 0x2, 0x4, 0x4, 0x4, 0x80, 0x8, 0x4, 0x10000, 0x7, 0x50ed, 0xb58, 0x24, 0x50000000, 0xffffffff, 0x3f, 0xac5, 0x7f]}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000180), 0x4) 05:35:42 executing program 2: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r1}) 05:35:42 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="9a1de2cb347e3d831df09a6801635ac1c5a58386a4f738182ffb8be7e1cce042a60fa3fda3", 0x25) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) (async) getsockname$netlink(r4, &(0x7f0000000040), &(0x7f0000000080)=0xc) 05:35:42 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000080)={0x8, 0x3, 0x1, 0x9, &(0x7f0000000000)=[{0x3c03, 0xf6c3, 0x5, 0x515}, {0x3f, 0x0, 0x9, 0x2}, {0x3, 0x5, 0x2, 0x904}, {0x0, 0x8ceb, 0xc531, 0x101}, {0x2, 0x0, 0x6, 0x40}, {0xff, 0x100, 0x9, 0x4}, {0xfeff, 0x1, 0x4, 0xa6a}, {0x9, 0xbb5c, 0x0, 0x5}, {0x0, 0x2, 0x3f}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 05:35:42 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) bpf$MAP_CREATE(0x3, 0x0, 0x15) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) (async) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) (async) bpf$MAP_CREATE(0x3, 0x0, 0x15) (async) 05:35:42 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5df7e6276f5659df}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf250100000006000e000900000006000300ea0500000c0010000500000000000000050005000100000053133fd7d217a0db1ff4784db90f56d997ab44f45d331e1f18eae6c169743750c99e3ee482a802f80096a598d330c8e27a42fc79dfbdad4186abf0735953efe664798a172f62dddc0cdd48282dead3124f3f8c93ae9e9a53f2763ed32ab7fff287f2a3f5b18cd9dd6bf1a641fb42f04acec1c7c04bc9616388c8ac0e4c0d66fa25f01a0f4d1d62791f441461d0013a115f26c5eef7369582bf75737aa2a15c6b52b45f4831eaa382711c5c69edc55dc52671d43e"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000001300)={0x1, 0x200, 0x8, 0xffff, 0x2, 0xffffffff}) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f00000002c0)={{0x1, 0xffffffff, 0x20, 0xac78, 0x7, 0x4}, 0x1d3, [0x6, 0xfffffc01, 0x0, 0x1, 0x8, 0x0, 0x9, 0x5e, 0x3, 0x5, 0x40, 0x7, 0x1, 0xfff, 0x5, 0x3fbc3c1b, 0x6, 0x7, 0x80000000, 0x3, 0x2, 0x1ff, 0xffffffff, 0x80000001, 0x7ff, 0x6, 0x2, 0x8, 0x3f, 0xa3e, 0x20, 0x5, 0xb36, 0x7fff, 0x5, 0x8, 0x7a, 0x9, 0x2, 0x10001, 0x1000, 0x7, 0x418f, 0x4, 0x8, 0x7, 0xb88, 0x101, 0x100, 0x2, 0x7ff, 0x9, 0x10001, 0x8, 0xfffffffe, 0x363e, 0x9, 0x7, 0xffffffff, 0x800, 0x5, 0x401, 0xfa, 0x2, 0x90, 0x3, 0x8, 0x7, 0x6, 0x9, 0x567, 0x20, 0x80000001, 0xb4, 0xa5, 0x20, 0xfffffffc, 0xffffffff, 0x1, 0x7, 0x7, 0xfffffe00, 0xfff, 0xfff, 0x6, 0x3ff, 0x1ff, 0x0, 0x8001, 0x3, 0x9, 0x5, 0x8001, 0x56c944b0, 0xfffffffb, 0x4, 0x100, 0x2, 0x8, 0x0, 0x4, 0x2, 0x7, 0x1, 0xfff, 0x5, 0x80000001, 0x1f, 0x757, 0x4, 0x100, 0x3, 0x101, 0x89, 0x80000000, 0x1, 0x7fffffff, 0x0, 0x1f, 0x49, 0x7ff, 0x1, 0x200, 0xffffff7f, 0x4, 0x80000001, 0x5, 0xfffffff8, 0x9, 0x2, 0x800, 0x8, 0x4, 0xfffffffd, 0x1, 0x80, 0x9, 0x0, 0x40, 0xd48, 0x1f50, 0xffffff09, 0x1, 0x3f, 0x0, 0x3, 0x401, 0x9, 0x5, 0xffffffff, 0x4, 0x0, 0x12, 0x96, 0x23, 0x6, 0xff, 0x9, 0x40, 0x4, 0xffff, 0x401, 0x1, 0xeb5f, 0x2d9a, 0x9, 0x2, 0x8, 0x7f, 0x6, 0x2, 0x80, 0x3, 0x2, 0x7, 0x3, 0x0, 0x0, 0x1, 0x7, 0x32, 0x4, 0x2, 0x90b8, 0x2, 0x0, 0x5229, 0x10000, 0xf3, 0x7fff, 0x4, 0x2, 0x6, 0x684f, 0x3ff, 0xa9a, 0x1f, 0x9ae, 0x3, 0x5, 0x7, 0x200, 0x7, 0x9be6, 0x1, 0x1f, 0x401, 0x401, 0x79, 0x1f, 0x400, 0x80000000, 0x0, 0x3, 0x7, 0x401, 0x0, 0x400, 0x81, 0xe9f, 0x10001, 0x0, 0x45, 0x2, 0x0, 0x7f, 0x800, 0x9, 0x10001, 0x4, 0xfffeffff, 0x0, 0x3c47, 0x7fffffff, 0x7f, 0x5, 0x3, 0xdf8, 0x4, 0x1, 0xffff, 0x768d, 0x80000001, 0x6b050e74, 0xa46, 0x8, 0x3, 0x5, 0x800, 0x400, 0x20e, 0x2, 0xffff8001, 0x51fb3317, 0xffffff80, 0x5, 0x2, 0x9, 0x3, 0x64, 0x9, 0x3, 0x80000001, 0x868, 0x9, 0x200, 0x3f, 0xfbd1, 0x4, 0x2, 0x7, 0x101, 0xffffffff, 0x8, 0x3, 0x1, 0x5, 0x5e, 0x4, 0x7fff, 0x9, 0x7, 0x0, 0x400, 0xfffffff7, 0x3, 0x800, 0xffff08eb, 0x6, 0x4, 0x4, 0x0, 0x7, 0x6, 0x3ba7, 0x1, 0x7fff, 0x46, 0x4, 0x1, 0x115e6303, 0x8001, 0x1ff, 0x3, 0x7, 0x3, 0x3, 0x7, 0xffffffff, 0x554, 0x0, 0xffffff01, 0x7, 0x10001, 0x97, 0x5601, 0x101, 0x3, 0x2, 0x6, 0x1, 0x5, 0x1, 0x1, 0x401, 0x4800, 0x3, 0x80, 0x8000, 0x10000, 0x8001, 0x2, 0x5f, 0x5, 0x8bd, 0x80000000, 0x2, 0x2, 0x7, 0xffffff80, 0xfffffffa, 0x7, 0x1ff, 0x7, 0x8, 0x7fffffff, 0x128, 0x0, 0xb, 0x7, 0x1ff, 0x3, 0x6, 0x1af5, 0x7, 0x2, 0x2, 0x3, 0x1000, 0x8, 0x1, 0x101f, 0x81, 0x94e, 0x7, 0x6, 0x401, 0x1, 0x9, 0xaed, 0x9, 0x6, 0x8, 0xff, 0x6, 0x260efb06, 0x0, 0x9, 0xa778, 0x7, 0x59, 0x9, 0x80000000, 0x800, 0xffffffff, 0x80000001, 0x5, 0x6, 0x800, 0x2, 0x1000, 0x8, 0x7, 0x1ff, 0xfffff000, 0x80000001, 0x5, 0x85b5, 0x9, 0x3ff, 0x4, 0x71, 0x138e, 0x3c, 0x6, 0x1, 0x6, 0xebdb, 0xcc2d, 0x1, 0xffff8000, 0xf464, 0x6, 0x5, 0xccb, 0x4, 0xffffff01, 0x9, 0xffffff2f, 0xea, 0x2, 0x4, 0xfc000000, 0x40, 0xfffffab7, 0x0, 0x5, 0x3, 0x80000000, 0xffff, 0x83dc, 0x9, 0xdd, 0x5, 0x81, 0x1, 0x1, 0x400, 0x81, 0x7f, 0xe54, 0xf6, 0x80, 0xb99, 0x400, 0xfffff801, 0x80000000, 0xffffffff, 0x10000, 0xfff, 0x4, 0x7ff, 0xfffffffd, 0x4, 0x4, 0x61, 0x2, 0x3, 0x3f, 0x80000001, 0x2, 0x32, 0x7, 0xfff, 0x92, 0x5, 0x6, 0x4, 0x800000, 0x0, 0x7, 0x6, 0x9, 0x8, 0x0, 0x4, 0x3f, 0x80, 0x8, 0x400, 0x3, 0x7fffffff, 0x9, 0x5, 0x20, 0x7ff, 0x1, 0x3ff, 0x5, 0x1000, 0x54f7, 0xffffffd5, 0x5, 0x5, 0xffffffb7, 0x3f, 0x8, 0xb8, 0x9, 0x8000, 0x2, 0x6, 0x9, 0xfffffff8, 0x3ba, 0x2, 0x3, 0x6, 0x7ff, 0xff, 0x8, 0x7, 0x7, 0x5, 0x7, 0xfffffffb, 0x0, 0xab35, 0x6, 0x1, 0xce1a, 0x5, 0xff, 0x81, 0x7f, 0x1, 0x8, 0x5, 0x7, 0x4, 0x401, 0x4, 0xfffffffe, 0xffffffff, 0x4, 0x800, 0x7d0, 0x311e, 0x1f, 0x1, 0x9, 0x8, 0x6, 0x7, 0x1, 0x40, 0x10001, 0x100, 0xffff6951, 0x9, 0x81, 0x0, 0x5, 0x36, 0x1, 0x80000000, 0xfffffe00, 0x1, 0x0, 0x80, 0x4, 0x0, 0x4, 0x5, 0x90, 0x9, 0x7d, 0xff, 0x2, 0x2, 0x7, 0x5713, 0x200, 0x80000000, 0x1, 0x7, 0x29, 0x51, 0x7, 0x400, 0x46c2, 0x400, 0x8001, 0x5, 0xb44, 0x4, 0x57f, 0x4, 0x8, 0x0, 0x7, 0x6, 0x4, 0xebf, 0x78, 0x8, 0x4, 0x1000, 0x1e, 0x0, 0x3, 0x3c2d6ae1, 0x10001, 0x5, 0x6, 0x9, 0x100, 0x6, 0x9, 0x1, 0x6076fe4c, 0x3, 0x6, 0x1, 0x4, 0x8, 0x3, 0x0, 0xd42, 0x7f, 0x9, 0x68a9, 0x0, 0x3, 0x401, 0x7fffffff, 0xc0fe, 0x7ff, 0x5, 0x0, 0x5, 0x5, 0x5, 0xfff, 0x1, 0x0, 0x4, 0x81, 0x8, 0x1d2, 0x8000, 0x200, 0x6, 0x5, 0x1, 0x4, 0x1, 0x1, 0x1, 0x12, 0x7, 0x2, 0x6, 0x4e, 0xe804, 0x8, 0x101, 0x7ff, 0x81, 0x9, 0x8, 0x6e61, 0x2, 0x4, 0x3, 0x6, 0x7fffffff, 0x6, 0x3ade, 0x9, 0x7fffffff, 0x10001, 0x89, 0x7f, 0x401, 0xaf18, 0x40, 0x5, 0x5, 0x4b, 0x8, 0x7, 0x4, 0x8, 0x10001, 0x7f1, 0x1, 0xf955, 0x8, 0x6, 0x100, 0x9d, 0x6, 0xffffffff, 0x401, 0x1, 0x1, 0x3, 0x0, 0x7fff, 0x8001, 0x5, 0xfffffff7, 0x3, 0x3ff, 0x20, 0xffffffc6, 0x7ff, 0x1, 0x6, 0x8, 0x3, 0x2, 0x9, 0x5, 0x200, 0x0, 0x1, 0x1f95c4e7, 0xfffffffe, 0x5, 0x5, 0x4, 0x9, 0xaf9, 0x5, 0x4, 0x8, 0x9, 0x1, 0x73f, 0x800, 0x5, 0xa82, 0x3, 0x0, 0x0, 0xffffffc1, 0xffffffff, 0x6, 0x3, 0x2, 0x8000, 0x9, 0xfffffffa, 0x8, 0x24, 0x2, 0x872, 0xff, 0xd45, 0x9, 0x1000, 0x6, 0xa9ce, 0x7, 0x0, 0xc6, 0x6, 0x1f800, 0x2c, 0xf570, 0x9, 0x20, 0x5, 0x80000000, 0x20, 0x8001, 0x80000000, 0x6, 0x7877, 0xe9, 0x10000, 0x24, 0x7, 0xfff, 0x0, 0x4, 0x7ba8, 0x7fffffff, 0x8, 0x6, 0x5, 0x1, 0x7, 0x8, 0x1bbc, 0x3f, 0x4, 0x101, 0x8, 0x67b9, 0x9, 0x8001, 0x800, 0x4, 0x2, 0x3, 0x0, 0x7, 0x7, 0xfffffffa, 0x8, 0xffffffff, 0x100, 0x9, 0x8, 0xea, 0x2, 0x8, 0xffffffff, 0x9, 0x8, 0xf025, 0x3, 0x7fff, 0xf4, 0x3, 0x2, 0xc5, 0x894, 0x10000, 0x8, 0x4, 0x2, 0x9e, 0x3, 0xfffff001, 0x800000, 0x72cc, 0x7fff, 0xfff, 0x3, 0x4, 0x30d, 0x3f, 0x3, 0x9, 0x2, 0x5, 0x2, 0xfffffff9, 0xeecd, 0x1, 0x5, 0x7ff, 0x5, 0xffffffc0, 0x4410d0a9, 0x7, 0x3, 0x401, 0x6d3, 0x37eb, 0x8, 0x9, 0x1, 0x1, 0xbb, 0x452, 0x8, 0x101, 0x2, 0x5, 0x9, 0x8, 0xffffde7b, 0x6, 0x5, 0x1, 0x3, 0x5, 0x4, 0x2, 0x3f, 0x0, 0x3ff, 0x6, 0x3, 0x7, 0x7fffffff, 0x5, 0x4, 0x7, 0x10000, 0x9, 0xfff, 0x100, 0x800, 0xfffffffb, 0x80000001, 0x5, 0x800, 0x1, 0x1969, 0x6, 0x0, 0xfffffffc, 0x90, 0x5df, 0x0, 0x6, 0xda8, 0x3, 0x0, 0x7f, 0x800, 0x2, 0x8970, 0x9, 0x7f, 0xbadb, 0x8, 0xc3b000, 0x7d95, 0x9, 0x3, 0xb2, 0x4, 0x6, 0x5, 0x80000001, 0x2, 0x7fffffff, 0xb5e5, 0x0, 0x5, 0x4, 0x0, 0x6c, 0x83, 0x6, 0x8, 0x4, 0x8, 0xe83b, 0x4, 0x2, 0x100, 0x9e, 0x1ff, 0x6, 0xfdbc, 0x3, 0x2, 0x6, 0xba, 0x8, 0x7, 0x6, 0x2, 0x3, 0x1, 0x2, 0x41b, 0xffffff80, 0x0, 0x7, 0x6, 0xffffe560, 0x76406410, 0x10000, 0x10000, 0x2, 0x7f, 0x7, 0x20000000, 0x189, 0x3, 0x2, 0x3, 0x7, 0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0x3, 0x0, 0x8001, 0x0, 0x8000, 0xffffffff, 0x7f, 0x8001, 0x1ff, 0x0, 0x0, 0x1288, 0x18840000, 0x3ff, 0xec12, 0x80000001, 0x1, 0x9, 0x3, 0x4, 0xfffffffb, 0x20, 0x7, 0x3, 0x7ff, 0xfffffffe, 0x20, 0x9, 0x1, 0x2, 0x4, 0x4, 0x4, 0x80, 0x8, 0x4, 0x10000, 0x7, 0x50ed, 0xb58, 0x24, 0x50000000, 0xffffffff, 0x3f, 0xac5, 0x7f]}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000180), 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5df7e6276f5659df}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf250100000006000e000900000006000300ea0500000c0010000500000000000000050005000100000053133fd7d217a0db1ff4784db90f56d997ab44f45d331e1f18eae6c169743750c99e3ee482a802f80096a598d330c8e27a42fc79dfbdad4186abf0735953efe664798a172f62dddc0cdd48282dead3124f3f8c93ae9e9a53f2763ed32ab7fff287f2a3f5b18cd9dd6bf1a641fb42f04acec1c7c04bc9616388c8ac0e4c0d66fa25f01a0f4d1d62791f441461d0013a115f26c5eef7369582bf75737aa2a15c6b52b45f4831eaa382711c5c69edc55dc52671d43e"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x48) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') (async) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000001300)={0x1, 0x200, 0x8, 0xffff, 0x2, 0xffffffff}) (async) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f00000002c0)={{0x1, 0xffffffff, 0x20, 0xac78, 0x7, 0x4}, 0x1d3, [0x6, 0xfffffc01, 0x0, 0x1, 0x8, 0x0, 0x9, 0x5e, 0x3, 0x5, 0x40, 0x7, 0x1, 0xfff, 0x5, 0x3fbc3c1b, 0x6, 0x7, 0x80000000, 0x3, 0x2, 0x1ff, 0xffffffff, 0x80000001, 0x7ff, 0x6, 0x2, 0x8, 0x3f, 0xa3e, 0x20, 0x5, 0xb36, 0x7fff, 0x5, 0x8, 0x7a, 0x9, 0x2, 0x10001, 0x1000, 0x7, 0x418f, 0x4, 0x8, 0x7, 0xb88, 0x101, 0x100, 0x2, 0x7ff, 0x9, 0x10001, 0x8, 0xfffffffe, 0x363e, 0x9, 0x7, 0xffffffff, 0x800, 0x5, 0x401, 0xfa, 0x2, 0x90, 0x3, 0x8, 0x7, 0x6, 0x9, 0x567, 0x20, 0x80000001, 0xb4, 0xa5, 0x20, 0xfffffffc, 0xffffffff, 0x1, 0x7, 0x7, 0xfffffe00, 0xfff, 0xfff, 0x6, 0x3ff, 0x1ff, 0x0, 0x8001, 0x3, 0x9, 0x5, 0x8001, 0x56c944b0, 0xfffffffb, 0x4, 0x100, 0x2, 0x8, 0x0, 0x4, 0x2, 0x7, 0x1, 0xfff, 0x5, 0x80000001, 0x1f, 0x757, 0x4, 0x100, 0x3, 0x101, 0x89, 0x80000000, 0x1, 0x7fffffff, 0x0, 0x1f, 0x49, 0x7ff, 0x1, 0x200, 0xffffff7f, 0x4, 0x80000001, 0x5, 0xfffffff8, 0x9, 0x2, 0x800, 0x8, 0x4, 0xfffffffd, 0x1, 0x80, 0x9, 0x0, 0x40, 0xd48, 0x1f50, 0xffffff09, 0x1, 0x3f, 0x0, 0x3, 0x401, 0x9, 0x5, 0xffffffff, 0x4, 0x0, 0x12, 0x96, 0x23, 0x6, 0xff, 0x9, 0x40, 0x4, 0xffff, 0x401, 0x1, 0xeb5f, 0x2d9a, 0x9, 0x2, 0x8, 0x7f, 0x6, 0x2, 0x80, 0x3, 0x2, 0x7, 0x3, 0x0, 0x0, 0x1, 0x7, 0x32, 0x4, 0x2, 0x90b8, 0x2, 0x0, 0x5229, 0x10000, 0xf3, 0x7fff, 0x4, 0x2, 0x6, 0x684f, 0x3ff, 0xa9a, 0x1f, 0x9ae, 0x3, 0x5, 0x7, 0x200, 0x7, 0x9be6, 0x1, 0x1f, 0x401, 0x401, 0x79, 0x1f, 0x400, 0x80000000, 0x0, 0x3, 0x7, 0x401, 0x0, 0x400, 0x81, 0xe9f, 0x10001, 0x0, 0x45, 0x2, 0x0, 0x7f, 0x800, 0x9, 0x10001, 0x4, 0xfffeffff, 0x0, 0x3c47, 0x7fffffff, 0x7f, 0x5, 0x3, 0xdf8, 0x4, 0x1, 0xffff, 0x768d, 0x80000001, 0x6b050e74, 0xa46, 0x8, 0x3, 0x5, 0x800, 0x400, 0x20e, 0x2, 0xffff8001, 0x51fb3317, 0xffffff80, 0x5, 0x2, 0x9, 0x3, 0x64, 0x9, 0x3, 0x80000001, 0x868, 0x9, 0x200, 0x3f, 0xfbd1, 0x4, 0x2, 0x7, 0x101, 0xffffffff, 0x8, 0x3, 0x1, 0x5, 0x5e, 0x4, 0x7fff, 0x9, 0x7, 0x0, 0x400, 0xfffffff7, 0x3, 0x800, 0xffff08eb, 0x6, 0x4, 0x4, 0x0, 0x7, 0x6, 0x3ba7, 0x1, 0x7fff, 0x46, 0x4, 0x1, 0x115e6303, 0x8001, 0x1ff, 0x3, 0x7, 0x3, 0x3, 0x7, 0xffffffff, 0x554, 0x0, 0xffffff01, 0x7, 0x10001, 0x97, 0x5601, 0x101, 0x3, 0x2, 0x6, 0x1, 0x5, 0x1, 0x1, 0x401, 0x4800, 0x3, 0x80, 0x8000, 0x10000, 0x8001, 0x2, 0x5f, 0x5, 0x8bd, 0x80000000, 0x2, 0x2, 0x7, 0xffffff80, 0xfffffffa, 0x7, 0x1ff, 0x7, 0x8, 0x7fffffff, 0x128, 0x0, 0xb, 0x7, 0x1ff, 0x3, 0x6, 0x1af5, 0x7, 0x2, 0x2, 0x3, 0x1000, 0x8, 0x1, 0x101f, 0x81, 0x94e, 0x7, 0x6, 0x401, 0x1, 0x9, 0xaed, 0x9, 0x6, 0x8, 0xff, 0x6, 0x260efb06, 0x0, 0x9, 0xa778, 0x7, 0x59, 0x9, 0x80000000, 0x800, 0xffffffff, 0x80000001, 0x5, 0x6, 0x800, 0x2, 0x1000, 0x8, 0x7, 0x1ff, 0xfffff000, 0x80000001, 0x5, 0x85b5, 0x9, 0x3ff, 0x4, 0x71, 0x138e, 0x3c, 0x6, 0x1, 0x6, 0xebdb, 0xcc2d, 0x1, 0xffff8000, 0xf464, 0x6, 0x5, 0xccb, 0x4, 0xffffff01, 0x9, 0xffffff2f, 0xea, 0x2, 0x4, 0xfc000000, 0x40, 0xfffffab7, 0x0, 0x5, 0x3, 0x80000000, 0xffff, 0x83dc, 0x9, 0xdd, 0x5, 0x81, 0x1, 0x1, 0x400, 0x81, 0x7f, 0xe54, 0xf6, 0x80, 0xb99, 0x400, 0xfffff801, 0x80000000, 0xffffffff, 0x10000, 0xfff, 0x4, 0x7ff, 0xfffffffd, 0x4, 0x4, 0x61, 0x2, 0x3, 0x3f, 0x80000001, 0x2, 0x32, 0x7, 0xfff, 0x92, 0x5, 0x6, 0x4, 0x800000, 0x0, 0x7, 0x6, 0x9, 0x8, 0x0, 0x4, 0x3f, 0x80, 0x8, 0x400, 0x3, 0x7fffffff, 0x9, 0x5, 0x20, 0x7ff, 0x1, 0x3ff, 0x5, 0x1000, 0x54f7, 0xffffffd5, 0x5, 0x5, 0xffffffb7, 0x3f, 0x8, 0xb8, 0x9, 0x8000, 0x2, 0x6, 0x9, 0xfffffff8, 0x3ba, 0x2, 0x3, 0x6, 0x7ff, 0xff, 0x8, 0x7, 0x7, 0x5, 0x7, 0xfffffffb, 0x0, 0xab35, 0x6, 0x1, 0xce1a, 0x5, 0xff, 0x81, 0x7f, 0x1, 0x8, 0x5, 0x7, 0x4, 0x401, 0x4, 0xfffffffe, 0xffffffff, 0x4, 0x800, 0x7d0, 0x311e, 0x1f, 0x1, 0x9, 0x8, 0x6, 0x7, 0x1, 0x40, 0x10001, 0x100, 0xffff6951, 0x9, 0x81, 0x0, 0x5, 0x36, 0x1, 0x80000000, 0xfffffe00, 0x1, 0x0, 0x80, 0x4, 0x0, 0x4, 0x5, 0x90, 0x9, 0x7d, 0xff, 0x2, 0x2, 0x7, 0x5713, 0x200, 0x80000000, 0x1, 0x7, 0x29, 0x51, 0x7, 0x400, 0x46c2, 0x400, 0x8001, 0x5, 0xb44, 0x4, 0x57f, 0x4, 0x8, 0x0, 0x7, 0x6, 0x4, 0xebf, 0x78, 0x8, 0x4, 0x1000, 0x1e, 0x0, 0x3, 0x3c2d6ae1, 0x10001, 0x5, 0x6, 0x9, 0x100, 0x6, 0x9, 0x1, 0x6076fe4c, 0x3, 0x6, 0x1, 0x4, 0x8, 0x3, 0x0, 0xd42, 0x7f, 0x9, 0x68a9, 0x0, 0x3, 0x401, 0x7fffffff, 0xc0fe, 0x7ff, 0x5, 0x0, 0x5, 0x5, 0x5, 0xfff, 0x1, 0x0, 0x4, 0x81, 0x8, 0x1d2, 0x8000, 0x200, 0x6, 0x5, 0x1, 0x4, 0x1, 0x1, 0x1, 0x12, 0x7, 0x2, 0x6, 0x4e, 0xe804, 0x8, 0x101, 0x7ff, 0x81, 0x9, 0x8, 0x6e61, 0x2, 0x4, 0x3, 0x6, 0x7fffffff, 0x6, 0x3ade, 0x9, 0x7fffffff, 0x10001, 0x89, 0x7f, 0x401, 0xaf18, 0x40, 0x5, 0x5, 0x4b, 0x8, 0x7, 0x4, 0x8, 0x10001, 0x7f1, 0x1, 0xf955, 0x8, 0x6, 0x100, 0x9d, 0x6, 0xffffffff, 0x401, 0x1, 0x1, 0x3, 0x0, 0x7fff, 0x8001, 0x5, 0xfffffff7, 0x3, 0x3ff, 0x20, 0xffffffc6, 0x7ff, 0x1, 0x6, 0x8, 0x3, 0x2, 0x9, 0x5, 0x200, 0x0, 0x1, 0x1f95c4e7, 0xfffffffe, 0x5, 0x5, 0x4, 0x9, 0xaf9, 0x5, 0x4, 0x8, 0x9, 0x1, 0x73f, 0x800, 0x5, 0xa82, 0x3, 0x0, 0x0, 0xffffffc1, 0xffffffff, 0x6, 0x3, 0x2, 0x8000, 0x9, 0xfffffffa, 0x8, 0x24, 0x2, 0x872, 0xff, 0xd45, 0x9, 0x1000, 0x6, 0xa9ce, 0x7, 0x0, 0xc6, 0x6, 0x1f800, 0x2c, 0xf570, 0x9, 0x20, 0x5, 0x80000000, 0x20, 0x8001, 0x80000000, 0x6, 0x7877, 0xe9, 0x10000, 0x24, 0x7, 0xfff, 0x0, 0x4, 0x7ba8, 0x7fffffff, 0x8, 0x6, 0x5, 0x1, 0x7, 0x8, 0x1bbc, 0x3f, 0x4, 0x101, 0x8, 0x67b9, 0x9, 0x8001, 0x800, 0x4, 0x2, 0x3, 0x0, 0x7, 0x7, 0xfffffffa, 0x8, 0xffffffff, 0x100, 0x9, 0x8, 0xea, 0x2, 0x8, 0xffffffff, 0x9, 0x8, 0xf025, 0x3, 0x7fff, 0xf4, 0x3, 0x2, 0xc5, 0x894, 0x10000, 0x8, 0x4, 0x2, 0x9e, 0x3, 0xfffff001, 0x800000, 0x72cc, 0x7fff, 0xfff, 0x3, 0x4, 0x30d, 0x3f, 0x3, 0x9, 0x2, 0x5, 0x2, 0xfffffff9, 0xeecd, 0x1, 0x5, 0x7ff, 0x5, 0xffffffc0, 0x4410d0a9, 0x7, 0x3, 0x401, 0x6d3, 0x37eb, 0x8, 0x9, 0x1, 0x1, 0xbb, 0x452, 0x8, 0x101, 0x2, 0x5, 0x9, 0x8, 0xffffde7b, 0x6, 0x5, 0x1, 0x3, 0x5, 0x4, 0x2, 0x3f, 0x0, 0x3ff, 0x6, 0x3, 0x7, 0x7fffffff, 0x5, 0x4, 0x7, 0x10000, 0x9, 0xfff, 0x100, 0x800, 0xfffffffb, 0x80000001, 0x5, 0x800, 0x1, 0x1969, 0x6, 0x0, 0xfffffffc, 0x90, 0x5df, 0x0, 0x6, 0xda8, 0x3, 0x0, 0x7f, 0x800, 0x2, 0x8970, 0x9, 0x7f, 0xbadb, 0x8, 0xc3b000, 0x7d95, 0x9, 0x3, 0xb2, 0x4, 0x6, 0x5, 0x80000001, 0x2, 0x7fffffff, 0xb5e5, 0x0, 0x5, 0x4, 0x0, 0x6c, 0x83, 0x6, 0x8, 0x4, 0x8, 0xe83b, 0x4, 0x2, 0x100, 0x9e, 0x1ff, 0x6, 0xfdbc, 0x3, 0x2, 0x6, 0xba, 0x8, 0x7, 0x6, 0x2, 0x3, 0x1, 0x2, 0x41b, 0xffffff80, 0x0, 0x7, 0x6, 0xffffe560, 0x76406410, 0x10000, 0x10000, 0x2, 0x7f, 0x7, 0x20000000, 0x189, 0x3, 0x2, 0x3, 0x7, 0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0x3, 0x0, 0x8001, 0x0, 0x8000, 0xffffffff, 0x7f, 0x8001, 0x1ff, 0x0, 0x0, 0x1288, 0x18840000, 0x3ff, 0xec12, 0x80000001, 0x1, 0x9, 0x3, 0x4, 0xfffffffb, 0x20, 0x7, 0x3, 0x7ff, 0xfffffffe, 0x20, 0x9, 0x1, 0x2, 0x4, 0x4, 0x4, 0x80, 0x8, 0x4, 0x10000, 0x7, 0x50ed, 0xb58, 0x24, 0x50000000, 0xffffffff, 0x3f, 0xac5, 0x7f]}) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000180), 0x4) (async) 05:35:42 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="090000c6466f0f0ebc829ce68900", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250300000008003c0003000000050033000100000008003c0008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44091) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f00000000c0)=[0x1c3, 0x5, 0xdfc, 0x9, 0x3, 0x9ca7, 0x8, 0x401, 0x1], 0x9, 0x800, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x35}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048848}, 0x4040041) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0x4) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="090000c6466f0f0ebc829ce68900", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250300000008003c0003000000050033000100000008003c0008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44091) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f00000000c0)=[0x1c3, 0x5, 0xdfc, 0x9, 0x3, 0x9ca7, 0x8, 0x401, 0x1], 0x9, 0x800}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x35}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048848}, 0x4040041) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2}, 0x8) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0x4) (async) 05:35:42 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="9a1de2cb347e3d831df09a6801635ac1c5a58386a4f738182ffb8be7e1cce042a60fa3fda3", 0x25) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) getsockname$netlink(r4, &(0x7f0000000040), &(0x7f0000000080)=0xc) bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="9a1de2cb347e3d831df09a6801635ac1c5a58386a4f738182ffb8be7e1cce042a60fa3fda3", 0x25) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) (async) getsockname$netlink(r4, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) 05:35:42 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) getpid() (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r2, &(0x7f0000000100)=@phonet, &(0x7f0000000080)=0x80) 05:35:42 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5df7e6276f5659df}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf250100000006000e000900000006000300ea0500000c0010000500000000000000050005000100000053133fd7d217a0db1ff4784db90f56d997ab44f45d331e1f18eae6c169743750c99e3ee482a802f80096a598d330c8e27a42fc79dfbdad4186abf0735953efe664798a172f62dddc0cdd48282dead3124f3f8c93ae9e9a53f2763ed32ab7fff287f2a3f5b18cd9dd6bf1a641fb42f04acec1c7c04bc9616388c8ac0e4c0d66fa25f01a0f4d1d62791f441461d0013a115f26c5eef7369582bf75737aa2a15c6b52b45f4831eaa382711c5c69edc55dc52671d43e"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000001300)={0x1, 0x200, 0x8, 0xffff, 0x2, 0xffffffff}) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f00000002c0)={{0x1, 0xffffffff, 0x20, 0xac78, 0x7, 0x4}, 0x1d3, [0x6, 0xfffffc01, 0x0, 0x1, 0x8, 0x0, 0x9, 0x5e, 0x3, 0x5, 0x40, 0x7, 0x1, 0xfff, 0x5, 0x3fbc3c1b, 0x6, 0x7, 0x80000000, 0x3, 0x2, 0x1ff, 0xffffffff, 0x80000001, 0x7ff, 0x6, 0x2, 0x8, 0x3f, 0xa3e, 0x20, 0x5, 0xb36, 0x7fff, 0x5, 0x8, 0x7a, 0x9, 0x2, 0x10001, 0x1000, 0x7, 0x418f, 0x4, 0x8, 0x7, 0xb88, 0x101, 0x100, 0x2, 0x7ff, 0x9, 0x10001, 0x8, 0xfffffffe, 0x363e, 0x9, 0x7, 0xffffffff, 0x800, 0x5, 0x401, 0xfa, 0x2, 0x90, 0x3, 0x8, 0x7, 0x6, 0x9, 0x567, 0x20, 0x80000001, 0xb4, 0xa5, 0x20, 0xfffffffc, 0xffffffff, 0x1, 0x7, 0x7, 0xfffffe00, 0xfff, 0xfff, 0x6, 0x3ff, 0x1ff, 0x0, 0x8001, 0x3, 0x9, 0x5, 0x8001, 0x56c944b0, 0xfffffffb, 0x4, 0x100, 0x2, 0x8, 0x0, 0x4, 0x2, 0x7, 0x1, 0xfff, 0x5, 0x80000001, 0x1f, 0x757, 0x4, 0x100, 0x3, 0x101, 0x89, 0x80000000, 0x1, 0x7fffffff, 0x0, 0x1f, 0x49, 0x7ff, 0x1, 0x200, 0xffffff7f, 0x4, 0x80000001, 0x5, 0xfffffff8, 0x9, 0x2, 0x800, 0x8, 0x4, 0xfffffffd, 0x1, 0x80, 0x9, 0x0, 0x40, 0xd48, 0x1f50, 0xffffff09, 0x1, 0x3f, 0x0, 0x3, 0x401, 0x9, 0x5, 0xffffffff, 0x4, 0x0, 0x12, 0x96, 0x23, 0x6, 0xff, 0x9, 0x40, 0x4, 0xffff, 0x401, 0x1, 0xeb5f, 0x2d9a, 0x9, 0x2, 0x8, 0x7f, 0x6, 0x2, 0x80, 0x3, 0x2, 0x7, 0x3, 0x0, 0x0, 0x1, 0x7, 0x32, 0x4, 0x2, 0x90b8, 0x2, 0x0, 0x5229, 0x10000, 0xf3, 0x7fff, 0x4, 0x2, 0x6, 0x684f, 0x3ff, 0xa9a, 0x1f, 0x9ae, 0x3, 0x5, 0x7, 0x200, 0x7, 0x9be6, 0x1, 0x1f, 0x401, 0x401, 0x79, 0x1f, 0x400, 0x80000000, 0x0, 0x3, 0x7, 0x401, 0x0, 0x400, 0x81, 0xe9f, 0x10001, 0x0, 0x45, 0x2, 0x0, 0x7f, 0x800, 0x9, 0x10001, 0x4, 0xfffeffff, 0x0, 0x3c47, 0x7fffffff, 0x7f, 0x5, 0x3, 0xdf8, 0x4, 0x1, 0xffff, 0x768d, 0x80000001, 0x6b050e74, 0xa46, 0x8, 0x3, 0x5, 0x800, 0x400, 0x20e, 0x2, 0xffff8001, 0x51fb3317, 0xffffff80, 0x5, 0x2, 0x9, 0x3, 0x64, 0x9, 0x3, 0x80000001, 0x868, 0x9, 0x200, 0x3f, 0xfbd1, 0x4, 0x2, 0x7, 0x101, 0xffffffff, 0x8, 0x3, 0x1, 0x5, 0x5e, 0x4, 0x7fff, 0x9, 0x7, 0x0, 0x400, 0xfffffff7, 0x3, 0x800, 0xffff08eb, 0x6, 0x4, 0x4, 0x0, 0x7, 0x6, 0x3ba7, 0x1, 0x7fff, 0x46, 0x4, 0x1, 0x115e6303, 0x8001, 0x1ff, 0x3, 0x7, 0x3, 0x3, 0x7, 0xffffffff, 0x554, 0x0, 0xffffff01, 0x7, 0x10001, 0x97, 0x5601, 0x101, 0x3, 0x2, 0x6, 0x1, 0x5, 0x1, 0x1, 0x401, 0x4800, 0x3, 0x80, 0x8000, 0x10000, 0x8001, 0x2, 0x5f, 0x5, 0x8bd, 0x80000000, 0x2, 0x2, 0x7, 0xffffff80, 0xfffffffa, 0x7, 0x1ff, 0x7, 0x8, 0x7fffffff, 0x128, 0x0, 0xb, 0x7, 0x1ff, 0x3, 0x6, 0x1af5, 0x7, 0x2, 0x2, 0x3, 0x1000, 0x8, 0x1, 0x101f, 0x81, 0x94e, 0x7, 0x6, 0x401, 0x1, 0x9, 0xaed, 0x9, 0x6, 0x8, 0xff, 0x6, 0x260efb06, 0x0, 0x9, 0xa778, 0x7, 0x59, 0x9, 0x80000000, 0x800, 0xffffffff, 0x80000001, 0x5, 0x6, 0x800, 0x2, 0x1000, 0x8, 0x7, 0x1ff, 0xfffff000, 0x80000001, 0x5, 0x85b5, 0x9, 0x3ff, 0x4, 0x71, 0x138e, 0x3c, 0x6, 0x1, 0x6, 0xebdb, 0xcc2d, 0x1, 0xffff8000, 0xf464, 0x6, 0x5, 0xccb, 0x4, 0xffffff01, 0x9, 0xffffff2f, 0xea, 0x2, 0x4, 0xfc000000, 0x40, 0xfffffab7, 0x0, 0x5, 0x3, 0x80000000, 0xffff, 0x83dc, 0x9, 0xdd, 0x5, 0x81, 0x1, 0x1, 0x400, 0x81, 0x7f, 0xe54, 0xf6, 0x80, 0xb99, 0x400, 0xfffff801, 0x80000000, 0xffffffff, 0x10000, 0xfff, 0x4, 0x7ff, 0xfffffffd, 0x4, 0x4, 0x61, 0x2, 0x3, 0x3f, 0x80000001, 0x2, 0x32, 0x7, 0xfff, 0x92, 0x5, 0x6, 0x4, 0x800000, 0x0, 0x7, 0x6, 0x9, 0x8, 0x0, 0x4, 0x3f, 0x80, 0x8, 0x400, 0x3, 0x7fffffff, 0x9, 0x5, 0x20, 0x7ff, 0x1, 0x3ff, 0x5, 0x1000, 0x54f7, 0xffffffd5, 0x5, 0x5, 0xffffffb7, 0x3f, 0x8, 0xb8, 0x9, 0x8000, 0x2, 0x6, 0x9, 0xfffffff8, 0x3ba, 0x2, 0x3, 0x6, 0x7ff, 0xff, 0x8, 0x7, 0x7, 0x5, 0x7, 0xfffffffb, 0x0, 0xab35, 0x6, 0x1, 0xce1a, 0x5, 0xff, 0x81, 0x7f, 0x1, 0x8, 0x5, 0x7, 0x4, 0x401, 0x4, 0xfffffffe, 0xffffffff, 0x4, 0x800, 0x7d0, 0x311e, 0x1f, 0x1, 0x9, 0x8, 0x6, 0x7, 0x1, 0x40, 0x10001, 0x100, 0xffff6951, 0x9, 0x81, 0x0, 0x5, 0x36, 0x1, 0x80000000, 0xfffffe00, 0x1, 0x0, 0x80, 0x4, 0x0, 0x4, 0x5, 0x90, 0x9, 0x7d, 0xff, 0x2, 0x2, 0x7, 0x5713, 0x200, 0x80000000, 0x1, 0x7, 0x29, 0x51, 0x7, 0x400, 0x46c2, 0x400, 0x8001, 0x5, 0xb44, 0x4, 0x57f, 0x4, 0x8, 0x0, 0x7, 0x6, 0x4, 0xebf, 0x78, 0x8, 0x4, 0x1000, 0x1e, 0x0, 0x3, 0x3c2d6ae1, 0x10001, 0x5, 0x6, 0x9, 0x100, 0x6, 0x9, 0x1, 0x6076fe4c, 0x3, 0x6, 0x1, 0x4, 0x8, 0x3, 0x0, 0xd42, 0x7f, 0x9, 0x68a9, 0x0, 0x3, 0x401, 0x7fffffff, 0xc0fe, 0x7ff, 0x5, 0x0, 0x5, 0x5, 0x5, 0xfff, 0x1, 0x0, 0x4, 0x81, 0x8, 0x1d2, 0x8000, 0x200, 0x6, 0x5, 0x1, 0x4, 0x1, 0x1, 0x1, 0x12, 0x7, 0x2, 0x6, 0x4e, 0xe804, 0x8, 0x101, 0x7ff, 0x81, 0x9, 0x8, 0x6e61, 0x2, 0x4, 0x3, 0x6, 0x7fffffff, 0x6, 0x3ade, 0x9, 0x7fffffff, 0x10001, 0x89, 0x7f, 0x401, 0xaf18, 0x40, 0x5, 0x5, 0x4b, 0x8, 0x7, 0x4, 0x8, 0x10001, 0x7f1, 0x1, 0xf955, 0x8, 0x6, 0x100, 0x9d, 0x6, 0xffffffff, 0x401, 0x1, 0x1, 0x3, 0x0, 0x7fff, 0x8001, 0x5, 0xfffffff7, 0x3, 0x3ff, 0x20, 0xffffffc6, 0x7ff, 0x1, 0x6, 0x8, 0x3, 0x2, 0x9, 0x5, 0x200, 0x0, 0x1, 0x1f95c4e7, 0xfffffffe, 0x5, 0x5, 0x4, 0x9, 0xaf9, 0x5, 0x4, 0x8, 0x9, 0x1, 0x73f, 0x800, 0x5, 0xa82, 0x3, 0x0, 0x0, 0xffffffc1, 0xffffffff, 0x6, 0x3, 0x2, 0x8000, 0x9, 0xfffffffa, 0x8, 0x24, 0x2, 0x872, 0xff, 0xd45, 0x9, 0x1000, 0x6, 0xa9ce, 0x7, 0x0, 0xc6, 0x6, 0x1f800, 0x2c, 0xf570, 0x9, 0x20, 0x5, 0x80000000, 0x20, 0x8001, 0x80000000, 0x6, 0x7877, 0xe9, 0x10000, 0x24, 0x7, 0xfff, 0x0, 0x4, 0x7ba8, 0x7fffffff, 0x8, 0x6, 0x5, 0x1, 0x7, 0x8, 0x1bbc, 0x3f, 0x4, 0x101, 0x8, 0x67b9, 0x9, 0x8001, 0x800, 0x4, 0x2, 0x3, 0x0, 0x7, 0x7, 0xfffffffa, 0x8, 0xffffffff, 0x100, 0x9, 0x8, 0xea, 0x2, 0x8, 0xffffffff, 0x9, 0x8, 0xf025, 0x3, 0x7fff, 0xf4, 0x3, 0x2, 0xc5, 0x894, 0x10000, 0x8, 0x4, 0x2, 0x9e, 0x3, 0xfffff001, 0x800000, 0x72cc, 0x7fff, 0xfff, 0x3, 0x4, 0x30d, 0x3f, 0x3, 0x9, 0x2, 0x5, 0x2, 0xfffffff9, 0xeecd, 0x1, 0x5, 0x7ff, 0x5, 0xffffffc0, 0x4410d0a9, 0x7, 0x3, 0x401, 0x6d3, 0x37eb, 0x8, 0x9, 0x1, 0x1, 0xbb, 0x452, 0x8, 0x101, 0x2, 0x5, 0x9, 0x8, 0xffffde7b, 0x6, 0x5, 0x1, 0x3, 0x5, 0x4, 0x2, 0x3f, 0x0, 0x3ff, 0x6, 0x3, 0x7, 0x7fffffff, 0x5, 0x4, 0x7, 0x10000, 0x9, 0xfff, 0x100, 0x800, 0xfffffffb, 0x80000001, 0x5, 0x800, 0x1, 0x1969, 0x6, 0x0, 0xfffffffc, 0x90, 0x5df, 0x0, 0x6, 0xda8, 0x3, 0x0, 0x7f, 0x800, 0x2, 0x8970, 0x9, 0x7f, 0xbadb, 0x8, 0xc3b000, 0x7d95, 0x9, 0x3, 0xb2, 0x4, 0x6, 0x5, 0x80000001, 0x2, 0x7fffffff, 0xb5e5, 0x0, 0x5, 0x4, 0x0, 0x6c, 0x83, 0x6, 0x8, 0x4, 0x8, 0xe83b, 0x4, 0x2, 0x100, 0x9e, 0x1ff, 0x6, 0xfdbc, 0x3, 0x2, 0x6, 0xba, 0x8, 0x7, 0x6, 0x2, 0x3, 0x1, 0x2, 0x41b, 0xffffff80, 0x0, 0x7, 0x6, 0xffffe560, 0x76406410, 0x10000, 0x10000, 0x2, 0x7f, 0x7, 0x20000000, 0x189, 0x3, 0x2, 0x3, 0x7, 0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0x3, 0x0, 0x8001, 0x0, 0x8000, 0xffffffff, 0x7f, 0x8001, 0x1ff, 0x0, 0x0, 0x1288, 0x18840000, 0x3ff, 0xec12, 0x80000001, 0x1, 0x9, 0x3, 0x4, 0xfffffffb, 0x20, 0x7, 0x3, 0x7ff, 0xfffffffe, 0x20, 0x9, 0x1, 0x2, 0x4, 0x4, 0x4, 0x80, 0x8, 0x4, 0x10000, 0x7, 0x50ed, 0xb58, 0x24, 0x50000000, 0xffffffff, 0x3f, 0xac5, 0x7f]}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000180), 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5df7e6276f5659df}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf250100000006000e000900000006000300ea0500000c0010000500000000000000050005000100000053133fd7d217a0db1ff4784db90f56d997ab44f45d331e1f18eae6c169743750c99e3ee482a802f80096a598d330c8e27a42fc79dfbdad4186abf0735953efe664798a172f62dddc0cdd48282dead3124f3f8c93ae9e9a53f2763ed32ab7fff287f2a3f5b18cd9dd6bf1a641fb42f04acec1c7c04bc9616388c8ac0e4c0d66fa25f01a0f4d1d62791f441461d0013a115f26c5eef7369582bf75737aa2a15c6b52b45f4831eaa382711c5c69edc55dc52671d43e"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x48) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') (async) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000001300)={0x1, 0x200, 0x8, 0xffff, 0x2, 0xffffffff}) (async) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f00000002c0)={{0x1, 0xffffffff, 0x20, 0xac78, 0x7, 0x4}, 0x1d3, [0x6, 0xfffffc01, 0x0, 0x1, 0x8, 0x0, 0x9, 0x5e, 0x3, 0x5, 0x40, 0x7, 0x1, 0xfff, 0x5, 0x3fbc3c1b, 0x6, 0x7, 0x80000000, 0x3, 0x2, 0x1ff, 0xffffffff, 0x80000001, 0x7ff, 0x6, 0x2, 0x8, 0x3f, 0xa3e, 0x20, 0x5, 0xb36, 0x7fff, 0x5, 0x8, 0x7a, 0x9, 0x2, 0x10001, 0x1000, 0x7, 0x418f, 0x4, 0x8, 0x7, 0xb88, 0x101, 0x100, 0x2, 0x7ff, 0x9, 0x10001, 0x8, 0xfffffffe, 0x363e, 0x9, 0x7, 0xffffffff, 0x800, 0x5, 0x401, 0xfa, 0x2, 0x90, 0x3, 0x8, 0x7, 0x6, 0x9, 0x567, 0x20, 0x80000001, 0xb4, 0xa5, 0x20, 0xfffffffc, 0xffffffff, 0x1, 0x7, 0x7, 0xfffffe00, 0xfff, 0xfff, 0x6, 0x3ff, 0x1ff, 0x0, 0x8001, 0x3, 0x9, 0x5, 0x8001, 0x56c944b0, 0xfffffffb, 0x4, 0x100, 0x2, 0x8, 0x0, 0x4, 0x2, 0x7, 0x1, 0xfff, 0x5, 0x80000001, 0x1f, 0x757, 0x4, 0x100, 0x3, 0x101, 0x89, 0x80000000, 0x1, 0x7fffffff, 0x0, 0x1f, 0x49, 0x7ff, 0x1, 0x200, 0xffffff7f, 0x4, 0x80000001, 0x5, 0xfffffff8, 0x9, 0x2, 0x800, 0x8, 0x4, 0xfffffffd, 0x1, 0x80, 0x9, 0x0, 0x40, 0xd48, 0x1f50, 0xffffff09, 0x1, 0x3f, 0x0, 0x3, 0x401, 0x9, 0x5, 0xffffffff, 0x4, 0x0, 0x12, 0x96, 0x23, 0x6, 0xff, 0x9, 0x40, 0x4, 0xffff, 0x401, 0x1, 0xeb5f, 0x2d9a, 0x9, 0x2, 0x8, 0x7f, 0x6, 0x2, 0x80, 0x3, 0x2, 0x7, 0x3, 0x0, 0x0, 0x1, 0x7, 0x32, 0x4, 0x2, 0x90b8, 0x2, 0x0, 0x5229, 0x10000, 0xf3, 0x7fff, 0x4, 0x2, 0x6, 0x684f, 0x3ff, 0xa9a, 0x1f, 0x9ae, 0x3, 0x5, 0x7, 0x200, 0x7, 0x9be6, 0x1, 0x1f, 0x401, 0x401, 0x79, 0x1f, 0x400, 0x80000000, 0x0, 0x3, 0x7, 0x401, 0x0, 0x400, 0x81, 0xe9f, 0x10001, 0x0, 0x45, 0x2, 0x0, 0x7f, 0x800, 0x9, 0x10001, 0x4, 0xfffeffff, 0x0, 0x3c47, 0x7fffffff, 0x7f, 0x5, 0x3, 0xdf8, 0x4, 0x1, 0xffff, 0x768d, 0x80000001, 0x6b050e74, 0xa46, 0x8, 0x3, 0x5, 0x800, 0x400, 0x20e, 0x2, 0xffff8001, 0x51fb3317, 0xffffff80, 0x5, 0x2, 0x9, 0x3, 0x64, 0x9, 0x3, 0x80000001, 0x868, 0x9, 0x200, 0x3f, 0xfbd1, 0x4, 0x2, 0x7, 0x101, 0xffffffff, 0x8, 0x3, 0x1, 0x5, 0x5e, 0x4, 0x7fff, 0x9, 0x7, 0x0, 0x400, 0xfffffff7, 0x3, 0x800, 0xffff08eb, 0x6, 0x4, 0x4, 0x0, 0x7, 0x6, 0x3ba7, 0x1, 0x7fff, 0x46, 0x4, 0x1, 0x115e6303, 0x8001, 0x1ff, 0x3, 0x7, 0x3, 0x3, 0x7, 0xffffffff, 0x554, 0x0, 0xffffff01, 0x7, 0x10001, 0x97, 0x5601, 0x101, 0x3, 0x2, 0x6, 0x1, 0x5, 0x1, 0x1, 0x401, 0x4800, 0x3, 0x80, 0x8000, 0x10000, 0x8001, 0x2, 0x5f, 0x5, 0x8bd, 0x80000000, 0x2, 0x2, 0x7, 0xffffff80, 0xfffffffa, 0x7, 0x1ff, 0x7, 0x8, 0x7fffffff, 0x128, 0x0, 0xb, 0x7, 0x1ff, 0x3, 0x6, 0x1af5, 0x7, 0x2, 0x2, 0x3, 0x1000, 0x8, 0x1, 0x101f, 0x81, 0x94e, 0x7, 0x6, 0x401, 0x1, 0x9, 0xaed, 0x9, 0x6, 0x8, 0xff, 0x6, 0x260efb06, 0x0, 0x9, 0xa778, 0x7, 0x59, 0x9, 0x80000000, 0x800, 0xffffffff, 0x80000001, 0x5, 0x6, 0x800, 0x2, 0x1000, 0x8, 0x7, 0x1ff, 0xfffff000, 0x80000001, 0x5, 0x85b5, 0x9, 0x3ff, 0x4, 0x71, 0x138e, 0x3c, 0x6, 0x1, 0x6, 0xebdb, 0xcc2d, 0x1, 0xffff8000, 0xf464, 0x6, 0x5, 0xccb, 0x4, 0xffffff01, 0x9, 0xffffff2f, 0xea, 0x2, 0x4, 0xfc000000, 0x40, 0xfffffab7, 0x0, 0x5, 0x3, 0x80000000, 0xffff, 0x83dc, 0x9, 0xdd, 0x5, 0x81, 0x1, 0x1, 0x400, 0x81, 0x7f, 0xe54, 0xf6, 0x80, 0xb99, 0x400, 0xfffff801, 0x80000000, 0xffffffff, 0x10000, 0xfff, 0x4, 0x7ff, 0xfffffffd, 0x4, 0x4, 0x61, 0x2, 0x3, 0x3f, 0x80000001, 0x2, 0x32, 0x7, 0xfff, 0x92, 0x5, 0x6, 0x4, 0x800000, 0x0, 0x7, 0x6, 0x9, 0x8, 0x0, 0x4, 0x3f, 0x80, 0x8, 0x400, 0x3, 0x7fffffff, 0x9, 0x5, 0x20, 0x7ff, 0x1, 0x3ff, 0x5, 0x1000, 0x54f7, 0xffffffd5, 0x5, 0x5, 0xffffffb7, 0x3f, 0x8, 0xb8, 0x9, 0x8000, 0x2, 0x6, 0x9, 0xfffffff8, 0x3ba, 0x2, 0x3, 0x6, 0x7ff, 0xff, 0x8, 0x7, 0x7, 0x5, 0x7, 0xfffffffb, 0x0, 0xab35, 0x6, 0x1, 0xce1a, 0x5, 0xff, 0x81, 0x7f, 0x1, 0x8, 0x5, 0x7, 0x4, 0x401, 0x4, 0xfffffffe, 0xffffffff, 0x4, 0x800, 0x7d0, 0x311e, 0x1f, 0x1, 0x9, 0x8, 0x6, 0x7, 0x1, 0x40, 0x10001, 0x100, 0xffff6951, 0x9, 0x81, 0x0, 0x5, 0x36, 0x1, 0x80000000, 0xfffffe00, 0x1, 0x0, 0x80, 0x4, 0x0, 0x4, 0x5, 0x90, 0x9, 0x7d, 0xff, 0x2, 0x2, 0x7, 0x5713, 0x200, 0x80000000, 0x1, 0x7, 0x29, 0x51, 0x7, 0x400, 0x46c2, 0x400, 0x8001, 0x5, 0xb44, 0x4, 0x57f, 0x4, 0x8, 0x0, 0x7, 0x6, 0x4, 0xebf, 0x78, 0x8, 0x4, 0x1000, 0x1e, 0x0, 0x3, 0x3c2d6ae1, 0x10001, 0x5, 0x6, 0x9, 0x100, 0x6, 0x9, 0x1, 0x6076fe4c, 0x3, 0x6, 0x1, 0x4, 0x8, 0x3, 0x0, 0xd42, 0x7f, 0x9, 0x68a9, 0x0, 0x3, 0x401, 0x7fffffff, 0xc0fe, 0x7ff, 0x5, 0x0, 0x5, 0x5, 0x5, 0xfff, 0x1, 0x0, 0x4, 0x81, 0x8, 0x1d2, 0x8000, 0x200, 0x6, 0x5, 0x1, 0x4, 0x1, 0x1, 0x1, 0x12, 0x7, 0x2, 0x6, 0x4e, 0xe804, 0x8, 0x101, 0x7ff, 0x81, 0x9, 0x8, 0x6e61, 0x2, 0x4, 0x3, 0x6, 0x7fffffff, 0x6, 0x3ade, 0x9, 0x7fffffff, 0x10001, 0x89, 0x7f, 0x401, 0xaf18, 0x40, 0x5, 0x5, 0x4b, 0x8, 0x7, 0x4, 0x8, 0x10001, 0x7f1, 0x1, 0xf955, 0x8, 0x6, 0x100, 0x9d, 0x6, 0xffffffff, 0x401, 0x1, 0x1, 0x3, 0x0, 0x7fff, 0x8001, 0x5, 0xfffffff7, 0x3, 0x3ff, 0x20, 0xffffffc6, 0x7ff, 0x1, 0x6, 0x8, 0x3, 0x2, 0x9, 0x5, 0x200, 0x0, 0x1, 0x1f95c4e7, 0xfffffffe, 0x5, 0x5, 0x4, 0x9, 0xaf9, 0x5, 0x4, 0x8, 0x9, 0x1, 0x73f, 0x800, 0x5, 0xa82, 0x3, 0x0, 0x0, 0xffffffc1, 0xffffffff, 0x6, 0x3, 0x2, 0x8000, 0x9, 0xfffffffa, 0x8, 0x24, 0x2, 0x872, 0xff, 0xd45, 0x9, 0x1000, 0x6, 0xa9ce, 0x7, 0x0, 0xc6, 0x6, 0x1f800, 0x2c, 0xf570, 0x9, 0x20, 0x5, 0x80000000, 0x20, 0x8001, 0x80000000, 0x6, 0x7877, 0xe9, 0x10000, 0x24, 0x7, 0xfff, 0x0, 0x4, 0x7ba8, 0x7fffffff, 0x8, 0x6, 0x5, 0x1, 0x7, 0x8, 0x1bbc, 0x3f, 0x4, 0x101, 0x8, 0x67b9, 0x9, 0x8001, 0x800, 0x4, 0x2, 0x3, 0x0, 0x7, 0x7, 0xfffffffa, 0x8, 0xffffffff, 0x100, 0x9, 0x8, 0xea, 0x2, 0x8, 0xffffffff, 0x9, 0x8, 0xf025, 0x3, 0x7fff, 0xf4, 0x3, 0x2, 0xc5, 0x894, 0x10000, 0x8, 0x4, 0x2, 0x9e, 0x3, 0xfffff001, 0x800000, 0x72cc, 0x7fff, 0xfff, 0x3, 0x4, 0x30d, 0x3f, 0x3, 0x9, 0x2, 0x5, 0x2, 0xfffffff9, 0xeecd, 0x1, 0x5, 0x7ff, 0x5, 0xffffffc0, 0x4410d0a9, 0x7, 0x3, 0x401, 0x6d3, 0x37eb, 0x8, 0x9, 0x1, 0x1, 0xbb, 0x452, 0x8, 0x101, 0x2, 0x5, 0x9, 0x8, 0xffffde7b, 0x6, 0x5, 0x1, 0x3, 0x5, 0x4, 0x2, 0x3f, 0x0, 0x3ff, 0x6, 0x3, 0x7, 0x7fffffff, 0x5, 0x4, 0x7, 0x10000, 0x9, 0xfff, 0x100, 0x800, 0xfffffffb, 0x80000001, 0x5, 0x800, 0x1, 0x1969, 0x6, 0x0, 0xfffffffc, 0x90, 0x5df, 0x0, 0x6, 0xda8, 0x3, 0x0, 0x7f, 0x800, 0x2, 0x8970, 0x9, 0x7f, 0xbadb, 0x8, 0xc3b000, 0x7d95, 0x9, 0x3, 0xb2, 0x4, 0x6, 0x5, 0x80000001, 0x2, 0x7fffffff, 0xb5e5, 0x0, 0x5, 0x4, 0x0, 0x6c, 0x83, 0x6, 0x8, 0x4, 0x8, 0xe83b, 0x4, 0x2, 0x100, 0x9e, 0x1ff, 0x6, 0xfdbc, 0x3, 0x2, 0x6, 0xba, 0x8, 0x7, 0x6, 0x2, 0x3, 0x1, 0x2, 0x41b, 0xffffff80, 0x0, 0x7, 0x6, 0xffffe560, 0x76406410, 0x10000, 0x10000, 0x2, 0x7f, 0x7, 0x20000000, 0x189, 0x3, 0x2, 0x3, 0x7, 0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0x3, 0x0, 0x8001, 0x0, 0x8000, 0xffffffff, 0x7f, 0x8001, 0x1ff, 0x0, 0x0, 0x1288, 0x18840000, 0x3ff, 0xec12, 0x80000001, 0x1, 0x9, 0x3, 0x4, 0xfffffffb, 0x20, 0x7, 0x3, 0x7ff, 0xfffffffe, 0x20, 0x9, 0x1, 0x2, 0x4, 0x4, 0x4, 0x80, 0x8, 0x4, 0x10000, 0x7, 0x50ed, 0xb58, 0x24, 0x50000000, 0xffffffff, 0x3f, 0xac5, 0x7f]}) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000180), 0x4) (async) 05:35:42 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x7) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x82, &(0x7f0000000080)=0x2) 05:35:42 executing program 4: ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x7) r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:42 executing program 1: r0 = bpf$MAP_CREATE(0x3, 0x0, 0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x428280, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf25030000000500380000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x6, 0x8000, 0x1, 0x0, r1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x48) [ 1624.923342][ T8508] warn_alloc: 3 callbacks suppressed 05:35:42 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000080)={0x8, 0x3, 0x1, 0x9, &(0x7f0000000000)=[{0x3c03, 0xf6c3, 0x5, 0x515}, {0x3f, 0x0, 0x9, 0x2}, {0x3, 0x5, 0x2, 0x904}, {0x0, 0x8ceb, 0xc531, 0x101}, {0x2, 0x0, 0x6, 0x40}, {0xff, 0x100, 0x9, 0x4}, {0xfeff, 0x1, 0x4, 0xa6a}, {0x9, 0xbb5c, 0x0, 0x5}, {0x0, 0x2, 0x3f}]}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 05:35:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xcb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8001, 0x2}, 0xe) [ 1624.923359][ T8508] syz-executor.5: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 05:35:43 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x7) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x82, &(0x7f0000000080)=0x2) bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x7) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x82, &(0x7f0000000080)=0x2) (async) 05:35:43 executing program 4: ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x7) r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:43 executing program 1: r0 = bpf$MAP_CREATE(0x3, 0x0, 0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x428280, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf25030000000500380000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x6, 0x8000, 0x1, 0x0, r1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x428280, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf25030000000500380000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x6, 0x8000, 0x1, 0x0, r1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x48) (async) [ 1625.042084][ T8508] CPU: 0 PID: 8508 Comm: syz-executor.5 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1625.052027][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.062099][ T8508] Call Trace: [ 1625.065390][ T8508] [ 1625.068329][ T8508] dump_stack_lvl+0xcd/0x134 [ 1625.072957][ T8508] warn_alloc.cold+0x9b/0x189 [ 1625.077664][ T8508] ? zone_watermark_ok_safe+0x290/0x290 [ 1625.083241][ T8508] ? __kmalloc_node+0x62/0x390 05:35:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xcb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8001, 0x2}, 0xe) [ 1625.088046][ T8508] ? __vmalloc_node_range+0x7e8/0x1130 [ 1625.093533][ T8508] __vmalloc_node_range+0xeb5/0x1130 [ 1625.098853][ T8508] ? vfree_atomic+0xe0/0xe0 [ 1625.103382][ T8508] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1625.108957][ T8508] ? kernel_clone+0xe7/0xab0 [ 1625.113577][ T8508] copy_process+0x926/0x7310 [ 1625.118204][ T8508] ? kernel_clone+0xe7/0xab0 [ 1625.122821][ T8508] ? lock_chain_count+0x20/0x20 [ 1625.127705][ T8508] ? lock_chain_count+0x20/0x20 [ 1625.132595][ T8508] ? __cleanup_sighand+0xb0/0xb0 [ 1625.137564][ T8508] ? lock_downgrade+0x6e0/0x6e0 [ 1625.142452][ T8508] ? __lock_acquire+0x162f/0x54d0 [ 1625.147505][ T8508] ? kernel_clone+0x314/0xab0 [ 1625.152216][ T8508] kernel_clone+0xe7/0xab0 [ 1625.156656][ T8508] ? create_io_thread+0xf0/0xf0 [ 1625.161545][ T8508] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.167555][ T8508] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.173574][ T8508] ? find_held_lock+0x2d/0x110 [ 1625.178373][ T8508] __do_sys_clone+0xc8/0x110 [ 1625.182983][ T8508] ? kernel_clone+0xab0/0xab0 [ 1625.187678][ T8508] ? lock_downgrade+0x6e0/0x6e0 [ 1625.192573][ T8508] ? syscall_enter_from_user_mode+0x21/0x70 [ 1625.198471][ T8508] do_syscall_64+0x35/0xb0 [ 1625.202882][ T8508] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.208760][ T8508] RIP: 0033:0x7f3a94985481 [ 1625.213171][ T8508] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1625.232788][ T8508] RSP: 002b:00007ffdcb68bef8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1625.241194][ T8508] RAX: ffffffffffffffda RBX: 00007f3a93875700 RCX: 00007f3a94985481 [ 1625.249178][ T8508] RDX: 00007f3a938759d0 RSI: 00007f3a938752f0 RDI: 00000000003d0f00 [ 1625.257138][ T8508] RBP: 00007ffdcb68c140 R08: 00007f3a93875700 R09: 00007f3a93875700 [ 1625.265108][ T8508] R10: 00007f3a938759d0 R11: 0000000000000206 R12: 00007ffdcb68bfae [ 1625.273066][ T8508] R13: 00007ffdcb68bfaf R14: 00007f3a93875300 R15: 0000000000022000 [ 1625.281048][ T8508] [ 1625.300499][ T8508] Mem-Info: [ 1625.303720][ T8508] active_anon:502 inactive_anon:17832 isolated_anon:0 [ 1625.303720][ T8508] active_file:4873 inactive_file:7629 isolated_file:0 [ 1625.303720][ T8508] unevictable:768 dirty:13 writeback:0 [ 1625.303720][ T8508] slab_reclaimable:26800 slab_unreclaimable:98540 [ 1625.303720][ T8508] mapped:18176 shmem:1509 pagetables:463 bounce:0 [ 1625.303720][ T8508] kernel_misc_reclaimable:0 [ 1625.303720][ T8508] free:1428452 free_pcp:6950 free_cma:0 [ 1625.347577][ T8508] Node 0 active_anon:2000kB inactive_anon:71324kB active_file:19416kB inactive_file:30516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72704kB dirty:52kB writeback:0kB shmem:4488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB kernel_stack:9292kB pagetables:1848kB all_unreclaimable? no [ 1625.379310][ T8508] Node 1 active_anon:8kB inactive_anon:4kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1625.408195][ T8508] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1625.439654][ T8508] lowmem_reserve[]: 0 2647 2648 2648 2648 [ 1625.445972][ T8508] Node 0 DMA32 free:1745680kB boost:0kB min:35688kB low:44608kB high:53528kB reserved_highatomic:0KB active_anon:2000kB inactive_anon:71324kB active_file:19416kB inactive_file:30516kB unevictable:1536kB writepending:52kB present:3129332kB managed:2716784kB mlocked:0kB bounce:0kB free_pcp:27792kB local_pcp:5640kB free_cma:0kB [ 1625.477989][ T8508] lowmem_reserve[]: 0 0 0 0 0 [ 1625.482733][ T8508] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:656kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1625.509413][ T8508] lowmem_reserve[]: 0 0 0 0 0 [ 1625.514217][ T8508] Node 1 Normal free:3952768kB boost:0kB min:54208kB low:67760kB high:81312kB reserved_highatomic:0KB active_anon:8kB inactive_anon:4kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1625.544201][ T8508] lowmem_reserve[]: 0 0 0 0 0 [ 1625.549366][ T8508] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1625.563397][ T8508] Node 0 DMA32: 468*4kB (UME) 300*8kB (UM) 44*16kB (UM) 20*32kB (UME) 9*64kB (UME) 12*128kB (UM) 2*256kB (UE) 1*512kB (M) 2*1024kB (ME) 5*2048kB (ME) 421*4096kB (M) = 1745456kB [ 1625.581469][ T8508] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1625.593273][ T8508] Node 1 Normal: 160*4kB (UME) 28*8kB (UME) 24*16kB (UME) 177*32kB (UME) 80*64kB (UME) 29*128kB (UME) 11*256kB (UME) 6*512kB (UM) 1*1024kB (U) 1*2048kB (E) 959*4096kB (M) = 3952768kB [ 1625.611862][ T8508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1625.621861][ T8508] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 1625.631843][ T8508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1625.641724][ T8508] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB 05:35:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xcb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8001, 0x2}, 0xe) 05:35:43 executing program 1: r0 = bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x428280, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf25030000000500380000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x6, 0x8000, 0x1, 0x0, r1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x48) 05:35:43 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x7) (async) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x7) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x82, &(0x7f0000000080)=0x2) 05:35:43 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000080)={0x8, 0x3, 0x1, 0x9, &(0x7f0000000000)=[{0x3c03, 0xf6c3, 0x5, 0x515}, {0x3f, 0x0, 0x9, 0x2}, {0x3, 0x5, 0x2, 0x904}, {0x0, 0x8ceb, 0xc531, 0x101}, {0x2, 0x0, 0x6, 0x40}, {0xff, 0x100, 0x9, 0x4}, {0xfeff, 0x1, 0x4, 0xa6a}, {0x9, 0xbb5c, 0x0, 0x5}, {0x0, 0x2, 0x3f}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000080)={0x8, 0x3, 0x1, 0x9, &(0x7f0000000000)=[{0x3c03, 0xf6c3, 0x5, 0x515}, {0x3f, 0x0, 0x9, 0x2}, {0x3, 0x5, 0x2, 0x904}, {0x0, 0x8ceb, 0xc531, 0x101}, {0x2, 0x0, 0x6, 0x40}, {0xff, 0x100, 0x9, 0x4}, {0xfeff, 0x1, 0x4, 0xa6a}, {0x9, 0xbb5c, 0x0, 0x5}, {0x0, 0x2, 0x3f}]}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) (async) 05:35:43 executing program 4: ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x7) r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x7) (async) socket(0x2, 0xa, 0x0) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) [ 1625.651248][ T8508] 14011 total pagecache pages [ 1625.656254][ T8508] 0 pages in swap cache [ 1625.660454][ T8508] Swap cache stats: add 0, delete 0, find 0/0 [ 1625.669271][ T8508] Free swap = 0kB [ 1625.673054][ T8508] Total swap = 0kB [ 1625.677040][ T8508] 2097051 pages RAM [ 1625.680846][ T8508] 0 pages HighMem/MovableOnly [ 1625.685606][ T8508] 384446 pages reserved [ 1625.689763][ T8508] 0 pages cma reserved 05:35:43 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x23d}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2000c054) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x34, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x850) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x101, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xfff, 0x43, 0xfffffff7, 0x202, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x5}, 0x48) 05:35:43 executing program 4: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'ip6gretap0\x00', {}, 0x7}) accept$alg(r0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x10001}, 0x8) 05:35:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff, r1}) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x6) 05:35:43 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:43 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x202400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x1ff, 0x5}) 05:35:43 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x4c) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0xe}, 0x10) 05:35:43 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x23d}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2000c054) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x34, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x850) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x101, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xfff, 0x43, 0xfffffff7, 0x202, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x5}, 0x48) 05:35:43 executing program 4: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'ip6gretap0\x00', {}, 0x7}) accept$alg(r0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x10001}, 0x8) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'ip6gretap0\x00', {}, 0x7}) (async) accept$alg(r0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x10001}, 0x8) (async) 05:35:43 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) 05:35:43 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) (async, rerun: 64) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x23d}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2000c054) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x34, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x850) (async, rerun: 32) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x101, 0x10}, 0xc) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xfff, 0x43, 0xfffffff7, 0x202, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x5}, 0x48) 05:35:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async, rerun: 32) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff, r1}) (async) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x6) 05:35:43 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) (async, rerun: 64) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x202400) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x1ff, 0x5}) 05:35:43 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x4c) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0xe}, 0x10) 05:35:44 executing program 4: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) (async, rerun: 32) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (rerun: 32) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'ip6gretap0\x00', {}, 0x7}) (async) accept$alg(r0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x10001}, 0x8) 05:35:44 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff, r1}) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x6) 05:35:44 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="4ce7441275cebb6f3abeb8f3d4f4ab09f41b4646a7efbe26fccf277d48acc65180dc517522b759cd2935921389ac5e419d65f363f68414ee8496123a4c00973c55354dd2e7115b3fef16a997240900e5c10202a360411d2d3be03296c51a6ebe2301acc995eb6e32937d017c75e21de9497d0567ed840550ed529e72c543e53b69f9ee8542ca318fd8c890d0d7a350f96bcc7534d1c52202742494dc2937a098c1201f3bdf7f4f62ba4b4154821c74e88d39d464043cc9", 0xffffffffffffff36}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x345080) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_vs\x00') ioctl$I2C_TIMEOUT(r3, 0x702, 0xf8) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) bpf$MAP_CREATE(0x4, 0x0, 0x7) 05:35:44 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x202400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x1ff, 0x5}) bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x202400) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x1ff, 0x5}) (async) 05:35:44 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x4c) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0xe}, 0x10) bpf$MAP_CREATE(0x2, 0x0, 0x4c) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0xe}, 0x10) (async) 05:35:44 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0xfffffffa, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r1, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x200}, 0x48) 05:35:44 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), 0x1) 05:35:44 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000226bd7000fbdbdf250400000005002d0000000000050037000000000028002a000000000005002a000000000008002c000300000008003a0000020000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x55) bpf$MAP_CREATE(0x2, 0x0, 0x7) 05:35:44 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="4ce7441275cebb6f3abeb8f3d4f4ab09f41b4646a7efbe26fccf277d48acc65180dc517522b759cd2935921389ac5e419d65f363f68414ee8496123a4c00973c55354dd2e7115b3fef16a997240900e5c10202a360411d2d3be03296c51a6ebe2301acc995eb6e32937d017c75e21de9497d0567ed840550ed529e72c543e53b69f9ee8542ca318fd8c890d0d7a350f96bcc7534d1c52202742494dc2937a098c1201f3bdf7f4f62ba4b4154821c74e88d39d464043cc9", 0xffffffffffffff36}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x345080) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_vs\x00') ioctl$I2C_TIMEOUT(r3, 0x702, 0xf8) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) bpf$MAP_CREATE(0x4, 0x0, 0x7) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="4ce7441275cebb6f3abeb8f3d4f4ab09f41b4646a7efbe26fccf277d48acc65180dc517522b759cd2935921389ac5e419d65f363f68414ee8496123a4c00973c55354dd2e7115b3fef16a997240900e5c10202a360411d2d3be03296c51a6ebe2301acc995eb6e32937d017c75e21de9497d0567ed840550ed529e72c543e53b69f9ee8542ca318fd8c890d0d7a350f96bcc7534d1c52202742494dc2937a098c1201f3bdf7f4f62ba4b4154821c74e88d39d464043cc9", 0xffffffffffffff36}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x345080) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_vs\x00') (async) ioctl$I2C_TIMEOUT(r3, 0x702, 0xf8) (async) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) (async) bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) 05:35:44 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x3a) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x10000, &(0x7f0000000040)=0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) write$apparmor_current(r1, &(0x7f00000000c0)=@profile={'permprofile ', 'W/\x00'}, 0xf) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 05:35:44 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x420080, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x263e43b76929df63, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)=0x7f) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x80201) 05:35:44 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0xfffffffa, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r1, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x200}, 0x48) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0xfffffffa}, 0x8) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r1, 0x4) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x200}, 0x48) (async) 05:35:44 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="4ce7441275cebb6f3abeb8f3d4f4ab09f41b4646a7efbe26fccf277d48acc65180dc517522b759cd2935921389ac5e419d65f363f68414ee8496123a4c00973c55354dd2e7115b3fef16a997240900e5c10202a360411d2d3be03296c51a6ebe2301acc995eb6e32937d017c75e21de9497d0567ed840550ed529e72c543e53b69f9ee8542ca318fd8c890d0d7a350f96bcc7534d1c52202742494dc2937a098c1201f3bdf7f4f62ba4b4154821c74e88d39d464043cc9", 0xffffffffffffff36}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x345080) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_vs\x00') ioctl$I2C_TIMEOUT(r3, 0x702, 0xf8) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) (async) bpf$MAP_CREATE(0x4, 0x0, 0x7) 05:35:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfa5f, 0x8, 0xffff, 0x105b, r0, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x3}, 0x48) 05:35:44 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), 0x1) socket(0x2, 0xa, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) (async) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), 0x1) (async) 05:35:44 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x3a) (async, rerun: 64) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x10000, &(0x7f0000000040)=0x4) (async, rerun: 32) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) write$apparmor_current(r1, &(0x7f00000000c0)=@profile={'permprofile ', 'W/\x00'}, 0xf) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 05:35:44 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x420080, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x263e43b76929df63, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)=0x7f) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x80201) 05:35:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfa5f, 0x8, 0xffff, 0x105b, r0, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x3}, 0x48) 05:35:44 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001080)={&(0x7f0000000040)=[{0xffe0, 0x4210, 0x101a, &(0x7f00000011c0)="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"}, {0xb127, 0x6400, 0xb2, &(0x7f00000010c0)="4f70cd1d07714ef375b9bbdcc8eb727d2ce44435c2bc325b8c3020a3db33d800bf94cc62099e9bb43e74a6ef713cc9bdf63d76bbf10a8c9c6a80648298770d6a5ce33b5fc2325befa2e1af12abcb95a522233305b3e0d58d0650ecc1786c3f1609d09091743d93dcb569ae35a62e6a5326c8c7ce872e4d08724d5654e0e2e086830c90835254521bc994ba61ee399ef9c3d5b41298fa8d73636b86add106a7c5b8315245507660cdfeb973db58f0383b6fa1"}], 0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) 05:35:44 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async, rerun: 32) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0xfffffffa, 0x0}, 0x8) (rerun: 32) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r1, 0x4) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x200}, 0x48) 05:35:44 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x420080, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x263e43b76929df63, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)=0x7f) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x80201) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x420080, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x263e43b76929df63, 0x0) (async) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)=0x7f) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x80201) (async) 05:35:44 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async, rerun: 32) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) (async) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), 0x1) 05:35:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfa5f, 0x8, 0xffff, 0x105b, r0, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x3}, 0x48) 05:35:44 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001080)={&(0x7f0000000040)=[{0xffe0, 0x4210, 0x101a, &(0x7f00000011c0)="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"}, {0xb127, 0x6400, 0xb2, &(0x7f00000010c0)="4f70cd1d07714ef375b9bbdcc8eb727d2ce44435c2bc325b8c3020a3db33d800bf94cc62099e9bb43e74a6ef713cc9bdf63d76bbf10a8c9c6a80648298770d6a5ce33b5fc2325befa2e1af12abcb95a522233305b3e0d58d0650ecc1786c3f1609d09091743d93dcb569ae35a62e6a5326c8c7ce872e4d08724d5654e0e2e086830c90835254521bc994ba61ee399ef9c3d5b41298fa8d73636b86add106a7c5b8315245507660cdfeb973db58f0383b6fa1"}], 0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) (async) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001080)={&(0x7f0000000040)=[{0xffe0, 0x4210, 0x101a, &(0x7f00000011c0)="0d7ad19a63eb50bad6606adb966c17228e406749b605765252ec057e85dc5ba8fffcaa64e95350b4ae53031f9c422a97a16d8d17da3d4dcafd07ce3325e160e34c70ee26222f1d4445f6789559ce7b2767d8f8c373c77480bf1aefb84e41a69e3eff53c98ec66de7aab5a5257648ecc46b9a2caff29b13996e4f9a042d0d0afaad27292e822cb357dbc8ad28c72ee6e5c4a8aef8bdcd4b08dfe686817cdcb8a10358d59319bcca012c37dc848e4a512a08230dcf4292482b1c25d1c2ffc8f80caaf4ee44da4ced06edf6adce842ae5c152f70350169945865f8110ffb8b8a8c810c5d4e1846fc13d9fdfe583b0159982f2b2ef7b7aa8ff4d6c00c52f69716e51feedb2d96b2ff3f4257e86ec0a368814a54da68239271bfda600d4c42eca2955305ca24d6af9b25578af541f56519802f3be74dbcad9a861351430b9a02d022ac2b895c46b1ce29c8baabaa989ec03150a06389e776b9d2977ca2791a8d0914c501b45f0191febcd31a4bd9c513d69cb86ab1fe5ed5803405146e4483679215d6a985c82190f582191d1e03eaada012fb0586cc1f98c9f04ba0d00e1f2763718d464e6101711fa92895f4a6dd435528fc166e1718b65f5bed54e65775ff1da732e22c44a4a1eb2517a8cd42b1d223268920044cbc0876a78f31be44659c95b6cad754f2622e661be0d419491f798b61df54fc90975c4dd8a6e93b4da2fb90ab5c839590eef0890b5f536d2ce0c1ef31c55368d04cf483eb884bd383de2167d4a7811228dbcb38627e446c1cd46bb98ca6131a4354106d2dfbfb98399b47bb7f16a7f562f580b72514e7b2dfbec7d5532d0c7d049143b24e5920cbc1d82d091118fdba19c8ac8257389e2a5bdfdbff2208cb864fbf58f723eb936234378ade669c7301008393d0db1935566818a6011c3cbf8af36c066da5629600505200bbd4e9f9f7e8ff117d1e4fa32a35aaf6e9d9ef1cd2859d88b92b9ad781899af7bd4918e152f6f37f94d9f747a74dcc04cb6460d5bd1b6e65db821a115910239271cdf90bc2ec7f774de4541a144ac7440ae1f145b6d0df36eef41a494c2116db039ba76cae2e2c540c609c14a17432580e413d8d6089ca13834addbc6f8d196052b9d11447a6751bd4f2caf328bbc68c8d7d0427c613826023ae6a9f5467a86ee84a890351229a4034471bfa53d34af4efea9a459fbd0d75859de5213ab966d5bce542083a13b79082f4a6419f8c6530ae4365f355edac3a5c5cb745ea7d4882714237d2e06cef5a7e5eaed0d567a9411afd9273c0cdae2e29e43c6c40e07ae8d8bd37c61bc1b53a2026500e3098ef12420c755d73df6fa8e4049af22c34b2a41baeeba36bd4178c358c35e6a1469d719465a3caefb1cc83a399fe658c3aa55e2aa20de69ddeac63f7f49f281543bdc3b56cc37fc7e28539778985242823622ab588384fb6b841eee0078a0ef029747bf3ffb20573b6e47bbfe9b5827c2773400f413369c2152bb5389ae3ab0f215f3c86dbe9d550f3beebb3642489478e586c335844591a2841f88c048273e863e123c0c79f7593f88ee828db205747f6ceeba03c7e2fd68ead9680e4f1424e2b7b56077238bad887183b7c1b3079c56dbddd1555d4881c21b8e4acda912352ced8f20f27554216347d5c786a4a471a70bf64b0219587e6b64e65433ecbff3c0fb8404bf5b9b4caad15678889571bc008c5f8335afa2f673c7be1f01ca2b54e0c10b1d6246a61e32b2d0eb0211f982ad8d16bd820e8b4db63559d5eccdf44cda4e0a66a575198ea09d51a095a8a9f88774469989f66cb68b6f3f257c73caf69c32a5c04a4950ac55440fb0a8adf0b889b1121b51ce1050c67367955a7216cc0382c3eb46026f085307b074742bc3cbb22c3d10a8fd7acc1d07afcc0177e38c41ed2534e349dfb29e96f30fc965dde950f3ee4cf78244da3b05c8b48b4ffc1db7a5edd2cddc9dea9a0a220d15e9160df679bde0fe88670615d92fd2e471e59359bfa4b4a197d9aab9e91dc930779f58afb2dc13c882ab674a084a19394549e2a55759f4f4a673534e43bc3f3385ff6a892d575259e0df3d8723da85c2edae6a83549644ba94e401d1376d84ea7629d22868e92040df75aded285ab6d6ef1f50fc419fc696aa4a97289917f819b292035388db953a22d7d6a9f4405306958cb38779986761dfcda9ad85fd806e2b958e41c7745faf04800dedce0868730718052260cb59768d7c0b6c8eada13541cbd97659646d0b256b4df21a462fbd67ac17078f6894dde0faf8f5719f286554b966c364987db867444b36bc85f3876a55df8197b32e4817da804883c0c750e477bf94eca5e2e60479be3d565dacbc50990922ea422b9e9cde7741039465152c055e78df82d938e6287c2ed871de1257b52597c2efe98dc0dbebef388ad8cb3eb9c94e93115dbcd7a4db3e27abca8f48aae2223e8ecf76e48e67ae0bdb9b39ca8a05456026eca10216a71c5f813a2efdab55c0b889db969501d8f4c3efe05a7a60c75bf28da1e0ef28b6fb0eed4ae4d8a552fed88d9bf1d56e82a7ff6cc9e877528d3fe6fcce1604d541716ca5ff4a9a8076504de4d6a65623b3c0beb90a7a6d89c693391d4d6701db3340c664996f298da52781bf0ae325b30ceb43bbdcd8675f348b4e28f18a4997866834961b9b304a56986825e3c708149a90466d2da17823de9193b204fc5867a0f3b0181b3a66b07a4157d7ece4550ccdc6edcad2d87f1b4c3560fbea281869fc7ef1d095ddf8b9464b9d1465221899c71321e73b43ef410618850fe66cd19a17f0b8ed1628c85b716f3c66df3959c23fe56135c1b4a555a05bdf1f8d58ddeaa340dddec00c1f5de3c4e914c7837baccf903a28b1b1cd565b079dcb525d41fc4ce13fdc2926a45d061eb5e78248534376f9b84e21d0e4422f80552ae67bd012f6a582852fb696e2d5e2d62ab763fb05a678dff09076746ca9de396d25b61b0311db1a748ffa99bd860832ffb4f8b29803cc58be7e4c012ce12e0317fa2dbafb5c002b97c171651ae6ad24b58ad058f3450c66b4054731be8c1d0dc8d4e74816016898afe035b97e453e5ced29927964d42fa1524e5c064027d3a6c4e31150a2ffe70d1d883a849722db9df4d8cb23115e6d1e1935ea965f7caae41bcccd6764cf8498156fa699cfc29dccb357fe4651e39ab1803dfa9f87f05d141e4ce3b318ff95430ef1114eae788b9d0abd2937542ca6d543f4ec127dd5c347c34daeacf8dba802183a0867f2ed1df7865812392deb856b18a868e06eab993012a359ed2f819ea483dd697ac6656e0f25a0ca0938c102811ebff9419c273508c2ccba79a22206fa191f8d22c92d61681403bab7f4f8d4cbfbcf0a5a61197995d4e0a320689411baa3a256f1542bb9bb9e08cf9c3ca35c6cf58039c4f25acdaaf2cb8ea69965b1b165ff9fc7a70ed902e46e2a0bfbd7c021a2294ebf7f127e5caa552a6dada59a943bc277eaac68a893b1a808c45c8d43a2e9f6ef9ab92371048f7e2263a97992033ab46534edf7e5cfc7e3d5e101f416f1c6b7e8c977615650d0b0af66e74594b3cdbaa4aa19c947340102a1ef80dfec6016e6712c9ae4d8868833d69233d31d766b20eca659c973d8ade66647740bfd903e5c2a496d0b722cddf22aad501ea472814071c451dde8ff0f4cfd1b2c14e3d4663782bf1b21458d9c7d7eb4ad789ee1412ade562560114ad046476748325c2eabcbece37dd1ca2cba7145b603d537b1f4217467607fcf61171c33e697614d60db73869920d581e4a21ad9e193e225e29bab171b99d430f76155c6944d1244a241db730b70864846289a8a2e1cd6f235b09cc30c4588447e10a207c3717afd591287c3a4ccda6bbf8ddf6203215cb9da635b5b0a816647268e60d615a8b5df460881e624c00a05ada4af2bece3698dc5d2fb70670eb6be4379622a143a17e6e60129c0e5d2ed700c17125243ee67ed0ae8506b094f7581cc5e5357e8f0a0f237ac55b64c2304ad8fa57a4dcb17f8a313ffe4f5f90c0ad72683dc397c90eacf24b07cdff9b4aef2064bf3ff161ac158f2c677853037a6be504ac6b4d3e1534de1d52e3d5c2ce8a7d5987ef23f43f1357569b433dfd09bc85185cdaa72a289404f5a5c02e213faafe105710962683606d03d45ee4dfe8ee4a6846c2412a3956443a195ecb343cfddf3c31cce69b6530c5ec1cefe3c39d2ee5c4ae3527e26f1a2ed04baf72425bf1d195eb3c370588334a1fc697818cf86960ac85d7b9fa67ec9ae5b9d1f4d644e1039f21d07707b59664545a8498d329a0de91bcfbb27c3a38b2fee20bbf0798d136898a4d0d7b9d5ac21a879146c4d7a8022b41fd7afd0320ad600d7eb242cc079114b80b6006283a42ceb118aa44308d475737a5c4fbf2dea6acae8ad6d5a625ba8d7334220c1249d9cdf5527f8c3fce3f409ece37ff607226ed837a42014102c47832159e7a7fecab901c2d49625a0c154bbffc6664a418173d294fea1eb43c8a643b07afa9047fbc290cb2153c0fbfabf2e028c36774c0a6d07c0040a6e431c81230321d18a4177a56e7fec1113551aad390b83179b1382b829aeb27b0e03ffa9ce8f9a56535ea2960f782258a3f4203536929a5ad2a5e31015830299ed506a3825a23f0e82cb60645a72b8b9229445728fb9b15483bffba821b8b3ba137be13584a6fdd7feb5d83cccb22c0178be0c230ba0684151b72ebea86c1de147b93a0e011722f90b890c6e325be16c8b74e6087221965eb641c9adadd2354aae49b578249e673fb94cf3bc663b4fbc2418a6d40b01487c38a80b9ec6a03af9e53308fa065c30d2e7e3110abf4441f49596dc8b9ada094a879935770eb80ef79ad33066cf08cadd5fee548157c78d0aabc36a4b837d2c0ae55f6cac3f6fc5d502b30245b22d19a7f8cf3ed0e48df13cb12d936748d7d60225d8234cd4abdc18fabb2ab32c2b4ac708d188ec6c5d8e8316d754847679013cdf94aefcf3115b355353d625a640f50390d976215503d00128d2f7efa549b4e2a4e60f02fa4625fb880087098f5d2267a7901ebd771ff5ec8c02d72b18d62424c9a0a2ddf7c4d652c096d76bd7ce10c1c485582a282184ed67dec4036b7db7c978d437670b52a945ba9caed925799211b81d870f55f75f68e5bc32d147dfc62ae2447ce2dc212cc94a37813f79dbd80152e4cab317db0d87746656bd1ade0b0004f2ba11e2aa696eb40fa8270c51db6bcd2cc52188985c52006e48a3e12b588a0b49591f690535e86d076b417fc59eee2f82fc4b01666888d1e5a80c3295ad0fae1a3e170889ad064cde741788a1bf7d01f091250ea94201b9bc0fe5b2f292950889445a806afe79c7de7d9835f0749284db573ec814651c314d12042832766c4f9b467de1590e3e4545541af2c71b3f241b8c7d82e6583951a3aec1141375be7b2948486b299b03f08baba6bab22c78836b36b256191d7a47e1cb0efe7228e266a7966ead2abb723ed217e9a6aa8b3a94d83991dac40bccda000e3d92d6cd16d1b4c5a9c809b173e3c6f1b67745b7c4dfbb8049940922a587575a8cdfe11d2ab980a3732035bc5541af7458d53dd8178a1160ed6dc316f4e29b181a49a3b091ad97d973f3bee30b9bb6e66d42486a12d7fe05bf5ab9c1590113db7743c742d6973a21c3ec3b604ebcdae0ae68626794f3bf24fd5c4a7d439d286a0ff292ec47163667a0de1da1dcd4e922deee7ccff1845d0b9b220e75aa3d312a001562fb59f2f08797ae8dea67d03493c43242d96ef6e2b1a873aac6b3512bdcee3b89fd1616bc4d7840c55adf5288"}, {0xb127, 0x6400, 0xb2, &(0x7f00000010c0)="4f70cd1d07714ef375b9bbdcc8eb727d2ce44435c2bc325b8c3020a3db33d800bf94cc62099e9bb43e74a6ef713cc9bdf63d76bbf10a8c9c6a80648298770d6a5ce33b5fc2325befa2e1af12abcb95a522233305b3e0d58d0650ecc1786c3f1609d09091743d93dcb569ae35a62e6a5326c8c7ce872e4d08724d5654e0e2e086830c90835254521bc994ba61ee399ef9c3d5b41298fa8d73636b86add106a7c5b8315245507660cdfeb973db58f0383b6fa1"}], 0x2}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) (async) 05:35:44 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x3a) (async, rerun: 64) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async, rerun: 32) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x10000, &(0x7f0000000040)=0x4) (rerun: 32) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) write$apparmor_current(r1, &(0x7f00000000c0)=@profile={'permprofile ', 'W/\x00'}, 0xf) (async, rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 05:35:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf25000000000500853e5e820000050033000100000008fa33000002000005002e00002426fa60f700000008002c000000008005002a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x80d0}, 0x4) 05:35:44 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x12580, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:35:44 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001080)={&(0x7f0000000040)=[{0xffe0, 0x4210, 0x101a, &(0x7f00000011c0)="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"}, {0xb127, 0x6400, 0xb2, &(0x7f00000010c0)="4f70cd1d07714ef375b9bbdcc8eb727d2ce44435c2bc325b8c3020a3db33d800bf94cc62099e9bb43e74a6ef713cc9bdf63d76bbf10a8c9c6a80648298770d6a5ce33b5fc2325befa2e1af12abcb95a522233305b3e0d58d0650ecc1786c3f1609d09091743d93dcb569ae35a62e6a5326c8c7ce872e4d08724d5654e0e2e086830c90835254521bc994ba61ee399ef9c3d5b41298fa8d73636b86add106a7c5b8315245507660cdfeb973db58f0383b6fa1"}], 0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) (async) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001080)={&(0x7f0000000040)=[{0xffe0, 0x4210, 0x101a, &(0x7f00000011c0)="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"}, {0xb127, 0x6400, 0xb2, &(0x7f00000010c0)="4f70cd1d07714ef375b9bbdcc8eb727d2ce44435c2bc325b8c3020a3db33d800bf94cc62099e9bb43e74a6ef713cc9bdf63d76bbf10a8c9c6a80648298770d6a5ce33b5fc2325befa2e1af12abcb95a522233305b3e0d58d0650ecc1786c3f1609d09091743d93dcb569ae35a62e6a5326c8c7ce872e4d08724d5654e0e2e086830c90835254521bc994ba61ee399ef9c3d5b41298fa8d73636b86add106a7c5b8315245507660cdfeb973db58f0383b6fa1"}], 0x2}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) (async) 05:35:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf25000000000500853e5e820000050033000100000008fa33000002000005002e00002426fa60f700000008002c000000008005002a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x80d0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf25000000000500853e5e820000050033000100000008fa33000002000005002e00002426fa60f700000008002c000000008005002a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x80d0}, 0x4) (async) 05:35:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:44 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x2, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:44 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="a94ddc649c3c7ccfbc81bc6c77c9cfe976304e3a44cdb1f1de2ed5d2183f36383f3bb84f31caa40e87f8a9420a4608aff98874860d18f6ed33f82ebb5704c752b457b01bde2a8c6e61737385e2e46623741f6b524b362b71ede386843bf4bb3ac5cd1086c06fd1b3a92724a6c6b856a894b56706d36ccfb26235d806358e3587698df9496483f9bb9a376686314417fe730352e203c79289d56ef246", 0x9c}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x81, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x40000) 05:35:44 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x12580, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x12580, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) 05:35:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf25000000000500853e5e820000050033000100000008fa33000002000005002e00002426fa60f700000008002c000000008005002a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x80d0}, 0x4) 05:35:44 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x2, 0x2) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:44 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000240)={0x4000000, 0x4, 0x1f}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7fe0, 0x6b0aacda, 0x8001, 0x480, r0, 0x7, '\x00', 0x0, r0, 0x2, 0x1, 0x5}, 0x48) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='autogroup\x00') ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000100)={0x877, 0x0, 0xa6bb, 0x1, &(0x7f00000000c0)=[{0x1ff, 0x7, 0x7, 0x9}]}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14009100", @ANYRES16=0x0, @ANYRES16], 0x14}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000180)={0x1, 'geneve0\x00'}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$I2C_RETRIES(r4, 0x701, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)={0x8}, 0x8) 05:35:44 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:44 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x12580, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x12580, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) 05:35:44 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="a94ddc649c3c7ccfbc81bc6c77c9cfe976304e3a44cdb1f1de2ed5d2183f36383f3bb84f31caa40e87f8a9420a4608aff98874860d18f6ed33f82ebb5704c752b457b01bde2a8c6e61737385e2e46623741f6b524b362b71ede386843bf4bb3ac5cd1086c06fd1b3a92724a6c6b856a894b56706d36ccfb26235d806358e3587698df9496483f9bb9a376686314417fe730352e203c79289d56ef246", 0x9c}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x81, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200001) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x40000) 05:35:44 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0xc00000, 0x0) read$hiddev(r0, &(0x7f0000000080)=""/51, 0xfffffffffffffe8a) 05:35:44 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x2, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket(0x2, 0xa, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x2, 0x2) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) 05:35:44 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000240)={0x4000000, 0x4, 0x1f}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7fe0, 0x6b0aacda, 0x8001, 0x480, r0, 0x7, '\x00', 0x0, r0, 0x2, 0x1, 0x5}, 0x48) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='autogroup\x00') ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000100)={0x877, 0x0, 0xa6bb, 0x1, &(0x7f00000000c0)=[{0x1ff, 0x7, 0x7, 0x9}]}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14009100", @ANYRES16=0x0, @ANYRES16], 0x14}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000180)={0x1, 'geneve0\x00'}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$I2C_RETRIES(r4, 0x701, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)={0x8}, 0x8) bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000240)={0x4000000, 0x4, 0x1f}) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7fe0, 0x6b0aacda, 0x8001, 0x480, r0, 0x7, '\x00', 0x0, r0, 0x2, 0x1, 0x5}, 0x48) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000140)=0x7, 0x4) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='autogroup\x00') (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000100)={0x877, 0x0, 0xa6bb, 0x1, &(0x7f00000000c0)=[{0x1ff, 0x7, 0x7, 0x9}]}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14009100", @ANYRES16=0x0, @ANYRES16], 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000180)={0x1, 'geneve0\x00'}) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) ioctl$I2C_RETRIES(r4, 0x701, 0x0) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)={0x8}, 0x8) (async) 05:35:44 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:44 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2a28c1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x800, 0x0, 0x10000}) 05:35:44 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="a94ddc649c3c7ccfbc81bc6c77c9cfe976304e3a44cdb1f1de2ed5d2183f36383f3bb84f31caa40e87f8a9420a4608aff98874860d18f6ed33f82ebb5704c752b457b01bde2a8c6e61737385e2e46623741f6b524b362b71ede386843bf4bb3ac5cd1086c06fd1b3a92724a6c6b856a894b56706d36ccfb26235d806358e3587698df9496483f9bb9a376686314417fe730352e203c79289d56ef246", 0x9c}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x81, 0x2}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200001) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x40000) 05:35:45 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0xc00000, 0x0) read$hiddev(r0, &(0x7f0000000080)=""/51, 0xfffffffffffffe8a) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0xc00000, 0x0) (async) read$hiddev(r0, &(0x7f0000000080)=""/51, 0xfffffffffffffe8a) (async) 05:35:45 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:45 executing program 4: r0 = socket(0x6, 0xa, 0x3daf) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501201, 0x0) 05:35:45 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) (async, rerun: 64) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000240)={0x4000000, 0x4, 0x1f}) (async, rerun: 64) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async, rerun: 64) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7fe0, 0x6b0aacda, 0x8001, 0x480, r0, 0x7, '\x00', 0x0, r0, 0x2, 0x1, 0x5}, 0x48) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000140)=0x7, 0x4) (async, rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='autogroup\x00') (rerun: 64) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000100)={0x877, 0x0, 0xa6bb, 0x1, &(0x7f00000000c0)=[{0x1ff, 0x7, 0x7, 0x9}]}) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14009100", @ANYRES16=0x0, @ANYRES16], 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000180)={0x1, 'geneve0\x00'}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) ioctl$I2C_RETRIES(r4, 0x701, 0x0) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)={0x8}, 0x8) (rerun: 64) 05:35:45 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0xc00000, 0x0) read$hiddev(r0, &(0x7f0000000080)=""/51, 0xfffffffffffffe8a) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0xc00000, 0x0) (async) read$hiddev(r0, &(0x7f0000000080)=""/51, 0xfffffffffffffe8a) (async) 05:35:45 executing program 1: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001080)={&(0x7f0000000040)=[{0xffe0, 0x4210, 0x101a, &(0x7f00000011c0)="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"}, {0xb127, 0x6400, 0xb2, &(0x7f00000010c0)="4f70cd1d07714ef375b9bbdcc8eb727d2ce44435c2bc325b8c3020a3db33d800bf94cc62099e9bb43e74a6ef713cc9bdf63d76bbf10a8c9c6a80648298770d6a5ce33b5fc2325befa2e1af12abcb95a522233305b3e0d58d0650ecc1786c3f1609d09091743d93dcb569ae35a62e6a5326c8c7ce872e4d08724d5654e0e2e086830c90835254521bc994ba61ee399ef9c3d5b41298fa8d73636b86add106a7c5b8315245507660cdfeb973db58f0383b6fa1"}], 0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) 05:35:45 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async, rerun: 32) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2a28c1, 0x0) (async, rerun: 32) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x800, 0x0, 0x10000}) 05:35:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:45 executing program 4: r0 = socket(0x6, 0xa, 0x3daf) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501201, 0x0) socket(0x6, 0xa, 0x3daf) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501201, 0x0) (async) 05:35:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1f, 0x0, 0x4, 0x9, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x401, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0xffffffff, 0xfffff083, 0x9, 0x1000, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x38000000, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) 05:35:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0xbf10, 0x9, 0x4, 0xab822ec97f89e5b7, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x48) 05:35:45 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2a28c1, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x800, 0x0, 0x10000}) 05:35:45 executing program 4: r0 = socket(0x6, 0xa, 0x3daf) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501201, 0x0) 05:35:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x28f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) bpf$MAP_CREATE(0x4, 0x0, 0x7) 05:35:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0xbf10, 0x9, 0x4, 0xab822ec97f89e5b7, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x48) (rerun: 32) 05:35:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1f, 0x0, 0x4, 0x9, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x401, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0xffffffff, 0xfffff083, 0x9, 0x1000, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x38000000, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) 05:35:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:45 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x400, 0x0, 0xffffffffffffffff}) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1000, "3a05a60fa48cce1842cf9a3cb4bbfc25712bc681878a77fc8406ac39961303273afaf38b424668a3af3bac166224286d415342fb219954855b6cab9c756e3e89fccea49bd743575e3f62b5de061b54c6647f3ef65c2474bbb294b1c5cd1c99995d98e04ae58e83c7d986f4be3f111fd56cdfa62f42a94b32542d4c74e4c75be108ae7ebb84f48159aa552a827b326fd7a78c4e5c90021e3053f656c1e297688fb7e04c6283137e0e182b74675cc82a20ba51e26a031f694336457b0a31df1e63a9b0009e98c9223e772c6d290d3e4162475a21684dd579a6ef8bfd2f6a3f7dffd6a93fe987ac6fac3e669fd0f20df5ffd080cabb72a6d697cce79d78ba0257e7c7a2a0dc3d88fe2623ab7c141af0eb89f72add454a991928a5a38a15a0ff74da51c252d85d043b9c1c18287332c7c28909e68bc10c2b80d42cbdf7b8afdcf3e7f19057a2af379672e10505bc11e5050cb0a0018980a316bc903ecdf422e00c6a2c4950a22738d9a6b2d3d432a88b38c12d883336eedd8fab23e42f2f7cc695c2984375e1d61d1edd21460d01f3f65c0b5de88d6b4585b2e6a0a539d344970269a7fb628a08e17b474a643bcc7bdd2a25e2a67503450aae2e2151b4808fc2814a1cfc2518c727842dc7986092134dd4341c308d1b9aaad60f4e4f279674b4f2ff306f08befc64561741718226416e7c419c67f252eacd77121512db53f63076e025e77900f314bcbe328e5adf6b0c97275a0733484b106bf9d2bbcf6375352176f5dface10b9e531ebabfc9f10546c7b0ae697cade309fbde4a1ec1bf8b3301c0e9d8e75d944b7bf2842d542829ac158f66f82a206aea2ee0274e9b55697450401256afa5154ebc588b2b7a82af1f067e95f2cad82c9f345dac5e0c6b45acb373bb2113757d57803ee6d0fb9254a533d716db3f977b2aa37a4acde38270328058da028365af9de3f148568340ef985d67e8e5f2bfae7c9c2edcfc2a08e9147787bdc3f15b91c8d287b51510f492af97ed2ac22c68c11359d85b130d44596f2edce39aec110f1c04816479d1a3c9e38c9a8c7fcb98c01b94a90e983264bda9fe3421e9ca756668dc8f3e8979381c2051303107527c1f5c57f303ad988bbf8a7041d75aa5cc126e4fe32640e5dda2b69869d01747f9b7854443a9b7ef343083459e59ed53035a53b53944eaeeb3cc8132d241b39359046ae347d921a50e2b8194dc3207d568a86911518ca363b54655fe486aef9cf93f2f7761fc16401b8123fa5840e8cb27dc683c5175d4d23e320735bd5946e320a1fe2cadfcdd89aa6e478c25676e7eeece119d84805089f468753f31f9dc8b0309c559742f164aa621fb0389b038881af788224f01b12ed29422d5a50ff1f9e0382174f56be5458cba28722f309fa40285e0f07b1e6815003bb67a8cc571063297c102a5269e4c163acc4d3496ee09d37a3c63df0e4965ad42e7cee1da96ec10801497fde1f20a09fa9d6b6d2d572019a3a48a1f8b6440acd993be8c7165754077e87d9e324ed7599195b6c9d8d9d5445d0d9c86b52cdd30a3adc5e2054c403dd1d166ca4c1f3de4e3436157b9bab3876ec12915d53301101bc2a9eee4664f20791362e40d5c07d8eb67cbf42716d1a798934d3120c507466148d3a8c2bc96ae31d746866f36935e7134c71f9540a4776c1cf0b1da5006b35784d7f31d928ee8d9fcf2c4d21ba6f269b9b55188a981a152c51ee59faa98f9c6277a987c7a10b5ba2be5cfad0e1c737f479591c623667737b9605ac666779931ee00880b6f371f2d285a3b4801eb8532bc0f558e48d6b5cf7ab34bfbaade3baf9833351988aeb850176a40db38524fc2b96f8ca4ccf27ed9529b4d13f2e69db9918a962f59bfe12dfd7ce53298a9991c0870a1265d77855c7b6ae21704f1a03d1e304248a3729560f2b7ab1fe7919adaa1e1e6cbd0c2a7a6ad61a454c6585a053473935f0c37d3e4c5b42dc36ebec09b8b0380488a32628ec8f78924f239a98f84d19c0b6f10882cddd6f7e810fa38caa7e62d9615c0f001e6118a705eea60dfa40608d3299aa9e25064c9d37f5e3135eb6009faf2fa3651ea4e7e6835d1ec486701204024a3c1d0ca271afbe0c51a1dc080bb8147a2ed1df67c5ba3804d4e7bb404efd8aa43077563665c374f11e6e1bd1368f7895d0631caaddb8bd2f653fb71ee0831194cdf7a28efe2614650ff37b221e36ea2a3a54073666cf10a0be672985e7e7d9eac2a9f4d480733587ea0c62bc1bb36d45c44c11e789b4e4898e54f969435122d8f0e465f219080631b2b6d8a52c6315277ecd2c4d1c5f58595d382a982bc7db8e142bb3eab43965fcf52f871a1a0ea7f26da786ee43f91031b9854591775e5becaa94b0c662ad7fc4bca3f454da975e0b36d96c9648b24c6409de58f8aec7ad75391c268b15daaae42cea440fbc0c387b1086a0b663afcd4907af4deda45704a13734ab4cf5bdb6f0ebd54135b283612cc3b541efb48e003262762f069427717f6d3c5637dec9236debf8242d49a2f7d21b024661541ac3e03696ab8b031fa86713703238f7ff632c5600cb1c276b2b3ba9fa5980e8e8dfa401627b24b9e5e7f575dd12642147a0d7d8a2e082925a2e415e4e3ffa70f6eaaf2b08ec6b4cc2a6df3896d1c59c19d39cecba25eec227ee9e25f89f9aa1d3a5f9fcac3a0c06c4fdf0ac7033c04acfe48d4578cf13627896f36ba95578cbf357cfc88e38307d1faa96153d8f45417d73b9d37a0c5fb3ed35d432724b5ee7d2ec89d89e96f88954de876145f4d758373b5611b3ec77556bd3c7ef93e230c06230209480317d45bccfa5a95ce1e3829a9bb952b05f85f23cfa2aca13c423df34e14199d4125b06797469af9182b16e458da3bf1cf491e00573708f8bad6eeee4a7d97be63894ba7c4c9260300882fe8c00b6f3854cbc2ab24f4bdc32151a2f7b5c81e0dc70ed1039b56758b69ccb30a6e53145dd7a76dcce6006d74544e81e594c85cf93f33f702cfe6ec8b484a5cdf5f7f90d36ea22eab56887325541af7e593948dc93d90671d3ccbc85c8878dc0c638b5fd77ce5842f0ef2844a3a6aa8f5b6092f46f0eb70b3c5359ad608de5ebf18b41dc2b4a53e3ea556ee23715090a25f7020edce35fb0d6b636b8a8646456fe14af40a133b35b9e7c4d548d831136b080889e3c5c184f30e9e7f3a37ea67a265f35401baa5b8bedbf2d5d204b35dc92dc553ea851c6d45e1994bf7ada26c15f09adf58e38ece26484bb431c37cb73aaa99772080593598d7abc9ca606c34999d8d4b3cff5f490e2e76d2900e66c22cbd518564162f1032f637680877f0ad7d67c3857221233608156791caaa6515930d957b774e40eae5e3dcd432d8d13a141c7387df3c13ce277ff19610f25d8b081d62e8fb8c1ed32832c8bf7649e39aee1758f4997b00071ad1f66b6ef596066a06a3a2868ac784e2af655056717d7e230334935d4e1a111298db197dd5b0edcc690a64ac88687269ab99e05c40ca122ddc2e3cc24cbb577af64dc2f484306380ce8114b8aad4a78498f28bd885dcde11b3dc6015d4fbe80d6344591592c3a99c1f617c3884c276b3683c45adc759cb3505cbfcf4af805a40a224c070ac9c209bdd8d23c8c76c231c0ebe5f147e39002af00bb5b5e8f6aff3d556a407ee6c72579ba6d54e53d3bb1609890ba0af47906be8527d8b5c7552e0d4a2d9a54ab5e4fb928061c697d18ace4fb061aaf5c0496d6d48864ac06c41421decd58f09c6bf8491b431eb6887bb92f1a5f4969822454c148d9b3dc64ecaf71def8be1c8ecdb4fb73565bca74d04a2704682d53ba8a175be1b00792ef7946ae31cdaa4a4f26212eb5f2dd291461ce0f8846761c8328f4d4cfaded24eb714c8f11fbe347738b0a5c169f77953b4d99345bfaa4a6d613cc60b2d59919e2e03b5761d3cc6422dd2951ae323500144afae43fd1a61f4f083c2513d2430dec3001c0a5660b6fe57fb2aa525b9cb29ab8dc6a30daf46b6f20b02e5d2973703fd250be0e307374592a4083379ee7a776ce9be915591dcf2560fd84bf0a890f30c929609de5c10530d10be303b3d02a7caba3379209a8648b7cad59671d8455566f7d21904e22427acfbf307e46907a4f60519ede6b735fb3d605c11dcf0314bb296e908c33603fd5a4e029d9af1b16cd681c02f86f703d2756942133ca786dfde551a0a02102c3a503bae0b39934eba18dd7746b84eb275de077f86733f69e65f6d9bd18f9459be533aacaf35f56af122e04690b19608181126c8fdb503727a5aceaa8ab12e9fe173cb436aaeb4e3582211b21bc774ae43c151d6c9ae41726a125647895d7bf011e2bdedcdb5e9ad99502cacb6eab2a0811085d759e1e8058781258413650233771a73d984fa8a420bab81befd6cbc8c1423a358e5938fc3755f7a4d02eb6a23a09cf32f3ac7292c526ac0fad34e8c24691e4215892d30ed82020a5d583a9047226952a862b939a0b1788205917918615d28d7ecffbc9a52fd54e9da6f91eea6a26e95fb02e72b440406c99f731463e54a8dc636551a254e27beb65663082b41b8b671fcc274033f576aada5cb6bad06ed83bea8f7918454bbfb5afa641b47587934639833b85fa7f1a1f15e40c6262c7b049f4f394a72bcb9bb1afd351c925ef4f361ddfd6371aac07efd3ff10c86694782e98a5f6b27e3daec8cf4cef56b18a1a6d33c36f780d2b886f34fccf0be4322a12f0ae7ab883864ad191dcc741e29d832b64740505b3bba60146a44bdb06f95b3e17f07dd8b28710e60f8dc3a32ffbae7b8be3b09e49007250dbd4a1d4d5e13235e446c5ef807ef5386ca5133058b7b6549e83b42f9599810c8ae6a0881473a2d6b387afaf03d9dd68462e998b15ef301310a65ee3611bfe7127b2f006ee1fcb147e0ecaa781e51969dd27ecf25b7f35b4bf772921ccc18e2f23076fe8f73f8828b076d9bb958a54f3dc7aaad8fd5b2e977c68d6099284ac01447e11b514395d990757523e9ab5a888bfa2177c92387ca063de92bfcdf933a7c49842c1f64d45e35741aa5ea5189159807410139c0ba8330f4c3f2bae1fcb864d2ac1da7e0f7a8255ab0756166312621c5de604a7d975d4ddf3fdd16795a44f4aacf627c363bfefab4fd43c3d695890a9f1b735d91e361f74b2dbcc0e44b83c07cbf50e876c00bbe826c7c7b4ea35e6c971ac60e5f40d1102bfa560c91581b003cb404d3879b013ca2ca234880dbbd94dc146d3cf961ad07f032053cfce81f9581cfa525c681965a169df5b1ac703934146699240e7defe181a815d7cb89119170210bf48fd63571d525a27f9ecf233f4b6b0746b1dd4b2beec1a63b6ad12855cf40c20eedfd8ad5768227b2967c349b84d9d0c1f4b12bd5935ca168edb22328ff0f855d14b14e005b570e79249e4a91e052b06ed71b465af8e91ee542bc36bb6372ef082743792c2786474675dc56b3c8eef47521155a415812101d53082384628b048dc58237ad8729b299d035754229c662c1712a9ddcf8176fee835492c8fbaba2dda513cdeb56b6549f9bd1d7778f712a68891d9448f47aec4e34d596ad3987d90a31006fdcf8d7828e703f7139ccb1d32dabb952487df3255e03e0ef28d999c4dcd1ad422d0ecdbe2dae0b491771bb02a4dfae395595208186b8d17ef77f32b3f83832dc344de0a01dc71e10dbe2a326966ff4201dac181efc17af97d1aa53ed4e80df4884a5e8b2e4d941568a3e67f12001ef2e943b64b938717e8eafca8447b1bea6f90bc13ed5c0b9844ff6a6"}) r2 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000010c0), 0x7fff, 0x6000) 05:35:45 executing program 2: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x8, 0x4) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0xa3, 0x100, 0x3, 0x4, 0x10000, 0x101, 0x100, 0xbd}) 05:35:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x28f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) bpf$MAP_CREATE(0x4, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x28f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) (async) bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) 05:35:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1f, 0x0, 0x4, 0x9, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x401, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0xffffffff, 0xfffff083, 0x9, 0x1000, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x38000000, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) 05:35:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0xbf10, 0x9, 0x4, 0xab822ec97f89e5b7, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x48) 05:35:45 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x400, 0x0, 0xffffffffffffffff}) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1000, "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"}) r2 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000010c0), 0x7fff, 0x6000) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x400}) (async) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1000, "3a05a60fa48cce1842cf9a3cb4bbfc25712bc681878a77fc8406ac39961303273afaf38b424668a3af3bac166224286d415342fb219954855b6cab9c756e3e89fccea49bd743575e3f62b5de061b54c6647f3ef65c2474bbb294b1c5cd1c99995d98e04ae58e83c7d986f4be3f111fd56cdfa62f42a94b32542d4c74e4c75be108ae7ebb84f48159aa552a827b326fd7a78c4e5c90021e3053f656c1e297688fb7e04c6283137e0e182b74675cc82a20ba51e26a031f694336457b0a31df1e63a9b0009e98c9223e772c6d290d3e4162475a21684dd579a6ef8bfd2f6a3f7dffd6a93fe987ac6fac3e669fd0f20df5ffd080cabb72a6d697cce79d78ba0257e7c7a2a0dc3d88fe2623ab7c141af0eb89f72add454a991928a5a38a15a0ff74da51c252d85d043b9c1c18287332c7c28909e68bc10c2b80d42cbdf7b8afdcf3e7f19057a2af379672e10505bc11e5050cb0a0018980a316bc903ecdf422e00c6a2c4950a22738d9a6b2d3d432a88b38c12d883336eedd8fab23e42f2f7cc695c2984375e1d61d1edd21460d01f3f65c0b5de88d6b4585b2e6a0a539d344970269a7fb628a08e17b474a643bcc7bdd2a25e2a67503450aae2e2151b4808fc2814a1cfc2518c727842dc7986092134dd4341c308d1b9aaad60f4e4f279674b4f2ff306f08befc64561741718226416e7c419c67f252eacd77121512db53f63076e025e77900f314bcbe328e5adf6b0c97275a0733484b106bf9d2bbcf6375352176f5dface10b9e531ebabfc9f10546c7b0ae697cade309fbde4a1ec1bf8b3301c0e9d8e75d944b7bf2842d542829ac158f66f82a206aea2ee0274e9b55697450401256afa5154ebc588b2b7a82af1f067e95f2cad82c9f345dac5e0c6b45acb373bb2113757d57803ee6d0fb9254a533d716db3f977b2aa37a4acde38270328058da028365af9de3f148568340ef985d67e8e5f2bfae7c9c2edcfc2a08e9147787bdc3f15b91c8d287b51510f492af97ed2ac22c68c11359d85b130d44596f2edce39aec110f1c04816479d1a3c9e38c9a8c7fcb98c01b94a90e983264bda9fe3421e9ca756668dc8f3e8979381c2051303107527c1f5c57f303ad988bbf8a7041d75aa5cc126e4fe32640e5dda2b69869d01747f9b7854443a9b7ef343083459e59ed53035a53b53944eaeeb3cc8132d241b39359046ae347d921a50e2b8194dc3207d568a86911518ca363b54655fe486aef9cf93f2f7761fc16401b8123fa5840e8cb27dc683c5175d4d23e320735bd5946e320a1fe2cadfcdd89aa6e478c25676e7eeece119d84805089f468753f31f9dc8b0309c559742f164aa621fb0389b038881af788224f01b12ed29422d5a50ff1f9e0382174f56be5458cba28722f309fa40285e0f07b1e6815003bb67a8cc571063297c102a5269e4c163acc4d3496ee09d37a3c63df0e4965ad42e7cee1da96ec10801497fde1f20a09fa9d6b6d2d572019a3a48a1f8b6440acd993be8c7165754077e87d9e324ed7599195b6c9d8d9d5445d0d9c86b52cdd30a3adc5e2054c403dd1d166ca4c1f3de4e3436157b9bab3876ec12915d53301101bc2a9eee4664f20791362e40d5c07d8eb67cbf42716d1a798934d3120c507466148d3a8c2bc96ae31d746866f36935e7134c71f9540a4776c1cf0b1da5006b35784d7f31d928ee8d9fcf2c4d21ba6f269b9b55188a981a152c51ee59faa98f9c6277a987c7a10b5ba2be5cfad0e1c737f479591c623667737b9605ac666779931ee00880b6f371f2d285a3b4801eb8532bc0f558e48d6b5cf7ab34bfbaade3baf9833351988aeb850176a40db38524fc2b96f8ca4ccf27ed9529b4d13f2e69db9918a962f59bfe12dfd7ce53298a9991c0870a1265d77855c7b6ae21704f1a03d1e304248a3729560f2b7ab1fe7919adaa1e1e6cbd0c2a7a6ad61a454c6585a053473935f0c37d3e4c5b42dc36ebec09b8b0380488a32628ec8f78924f239a98f84d19c0b6f10882cddd6f7e810fa38caa7e62d9615c0f001e6118a705eea60dfa40608d3299aa9e25064c9d37f5e3135eb6009faf2fa3651ea4e7e6835d1ec486701204024a3c1d0ca271afbe0c51a1dc080bb8147a2ed1df67c5ba3804d4e7bb404efd8aa43077563665c374f11e6e1bd1368f7895d0631caaddb8bd2f653fb71ee0831194cdf7a28efe2614650ff37b221e36ea2a3a54073666cf10a0be672985e7e7d9eac2a9f4d480733587ea0c62bc1bb36d45c44c11e789b4e4898e54f969435122d8f0e465f219080631b2b6d8a52c6315277ecd2c4d1c5f58595d382a982bc7db8e142bb3eab43965fcf52f871a1a0ea7f26da786ee43f91031b9854591775e5becaa94b0c662ad7fc4bca3f454da975e0b36d96c9648b24c6409de58f8aec7ad75391c268b15daaae42cea440fbc0c387b1086a0b663afcd4907af4deda45704a13734ab4cf5bdb6f0ebd54135b283612cc3b541efb48e003262762f069427717f6d3c5637dec9236debf8242d49a2f7d21b024661541ac3e03696ab8b031fa86713703238f7ff632c5600cb1c276b2b3ba9fa5980e8e8dfa401627b24b9e5e7f575dd12642147a0d7d8a2e082925a2e415e4e3ffa70f6eaaf2b08ec6b4cc2a6df3896d1c59c19d39cecba25eec227ee9e25f89f9aa1d3a5f9fcac3a0c06c4fdf0ac7033c04acfe48d4578cf13627896f36ba95578cbf357cfc88e38307d1faa96153d8f45417d73b9d37a0c5fb3ed35d432724b5ee7d2ec89d89e96f88954de876145f4d758373b5611b3ec77556bd3c7ef93e230c06230209480317d45bccfa5a95ce1e3829a9bb952b05f85f23cfa2aca13c423df34e14199d4125b06797469af9182b16e458da3bf1cf491e00573708f8bad6eeee4a7d97be63894ba7c4c9260300882fe8c00b6f3854cbc2ab24f4bdc32151a2f7b5c81e0dc70ed1039b56758b69ccb30a6e53145dd7a76dcce6006d74544e81e594c85cf93f33f702cfe6ec8b484a5cdf5f7f90d36ea22eab56887325541af7e593948dc93d90671d3ccbc85c8878dc0c638b5fd77ce5842f0ef2844a3a6aa8f5b6092f46f0eb70b3c5359ad608de5ebf18b41dc2b4a53e3ea556ee23715090a25f7020edce35fb0d6b636b8a8646456fe14af40a133b35b9e7c4d548d831136b080889e3c5c184f30e9e7f3a37ea67a265f35401baa5b8bedbf2d5d204b35dc92dc553ea851c6d45e1994bf7ada26c15f09adf58e38ece26484bb431c37cb73aaa99772080593598d7abc9ca606c34999d8d4b3cff5f490e2e76d2900e66c22cbd518564162f1032f637680877f0ad7d67c3857221233608156791caaa6515930d957b774e40eae5e3dcd432d8d13a141c7387df3c13ce277ff19610f25d8b081d62e8fb8c1ed32832c8bf7649e39aee1758f4997b00071ad1f66b6ef596066a06a3a2868ac784e2af655056717d7e230334935d4e1a111298db197dd5b0edcc690a64ac88687269ab99e05c40ca122ddc2e3cc24cbb577af64dc2f484306380ce8114b8aad4a78498f28bd885dcde11b3dc6015d4fbe80d6344591592c3a99c1f617c3884c276b3683c45adc759cb3505cbfcf4af805a40a224c070ac9c209bdd8d23c8c76c231c0ebe5f147e39002af00bb5b5e8f6aff3d556a407ee6c72579ba6d54e53d3bb1609890ba0af47906be8527d8b5c7552e0d4a2d9a54ab5e4fb928061c697d18ace4fb061aaf5c0496d6d48864ac06c41421decd58f09c6bf8491b431eb6887bb92f1a5f4969822454c148d9b3dc64ecaf71def8be1c8ecdb4fb73565bca74d04a2704682d53ba8a175be1b00792ef7946ae31cdaa4a4f26212eb5f2dd291461ce0f8846761c8328f4d4cfaded24eb714c8f11fbe347738b0a5c169f77953b4d99345bfaa4a6d613cc60b2d59919e2e03b5761d3cc6422dd2951ae323500144afae43fd1a61f4f083c2513d2430dec3001c0a5660b6fe57fb2aa525b9cb29ab8dc6a30daf46b6f20b02e5d2973703fd250be0e307374592a4083379ee7a776ce9be915591dcf2560fd84bf0a890f30c929609de5c10530d10be303b3d02a7caba3379209a8648b7cad59671d8455566f7d21904e22427acfbf307e46907a4f60519ede6b735fb3d605c11dcf0314bb296e908c33603fd5a4e029d9af1b16cd681c02f86f703d2756942133ca786dfde551a0a02102c3a503bae0b39934eba18dd7746b84eb275de077f86733f69e65f6d9bd18f9459be533aacaf35f56af122e04690b19608181126c8fdb503727a5aceaa8ab12e9fe173cb436aaeb4e3582211b21bc774ae43c151d6c9ae41726a125647895d7bf011e2bdedcdb5e9ad99502cacb6eab2a0811085d759e1e8058781258413650233771a73d984fa8a420bab81befd6cbc8c1423a358e5938fc3755f7a4d02eb6a23a09cf32f3ac7292c526ac0fad34e8c24691e4215892d30ed82020a5d583a9047226952a862b939a0b1788205917918615d28d7ecffbc9a52fd54e9da6f91eea6a26e95fb02e72b440406c99f731463e54a8dc636551a254e27beb65663082b41b8b671fcc274033f576aada5cb6bad06ed83bea8f7918454bbfb5afa641b47587934639833b85fa7f1a1f15e40c6262c7b049f4f394a72bcb9bb1afd351c925ef4f361ddfd6371aac07efd3ff10c86694782e98a5f6b27e3daec8cf4cef56b18a1a6d33c36f780d2b886f34fccf0be4322a12f0ae7ab883864ad191dcc741e29d832b64740505b3bba60146a44bdb06f95b3e17f07dd8b28710e60f8dc3a32ffbae7b8be3b09e49007250dbd4a1d4d5e13235e446c5ef807ef5386ca5133058b7b6549e83b42f9599810c8ae6a0881473a2d6b387afaf03d9dd68462e998b15ef301310a65ee3611bfe7127b2f006ee1fcb147e0ecaa781e51969dd27ecf25b7f35b4bf772921ccc18e2f23076fe8f73f8828b076d9bb958a54f3dc7aaad8fd5b2e977c68d6099284ac01447e11b514395d990757523e9ab5a888bfa2177c92387ca063de92bfcdf933a7c49842c1f64d45e35741aa5ea5189159807410139c0ba8330f4c3f2bae1fcb864d2ac1da7e0f7a8255ab0756166312621c5de604a7d975d4ddf3fdd16795a44f4aacf627c363bfefab4fd43c3d695890a9f1b735d91e361f74b2dbcc0e44b83c07cbf50e876c00bbe826c7c7b4ea35e6c971ac60e5f40d1102bfa560c91581b003cb404d3879b013ca2ca234880dbbd94dc146d3cf961ad07f032053cfce81f9581cfa525c681965a169df5b1ac703934146699240e7defe181a815d7cb89119170210bf48fd63571d525a27f9ecf233f4b6b0746b1dd4b2beec1a63b6ad12855cf40c20eedfd8ad5768227b2967c349b84d9d0c1f4b12bd5935ca168edb22328ff0f855d14b14e005b570e79249e4a91e052b06ed71b465af8e91ee542bc36bb6372ef082743792c2786474675dc56b3c8eef47521155a415812101d53082384628b048dc58237ad8729b299d035754229c662c1712a9ddcf8176fee835492c8fbaba2dda513cdeb56b6549f9bd1d7778f712a68891d9448f47aec4e34d596ad3987d90a31006fdcf8d7828e703f7139ccb1d32dabb952487df3255e03e0ef28d999c4dcd1ad422d0ecdbe2dae0b491771bb02a4dfae395595208186b8d17ef77f32b3f83832dc344de0a01dc71e10dbe2a326966ff4201dac181efc17af97d1aa53ed4e80df4884a5e8b2e4d941568a3e67f12001ef2e943b64b938717e8eafca8447b1bea6f90bc13ed5c0b9844ff6a6"}) (async) socket(0x2, 0xa, 0x0) (async) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f00000010c0), 0x7fff, 0x6000) (async) 05:35:45 executing program 2: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x8, 0x4) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0xa3, 0x100, 0x3, 0x4, 0x10000, 0x101, 0x100, 0xbd}) 05:35:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000140)=[0xdb, 0x1, 0x8, 0x9, 0x6], &(0x7f0000000180)=[0x400, 0xfffffffa, 0x0, 0x1, 0x3ff, 0xff6], 0x42, 0x6, 0x401, &(0x7f00000001c0)=[0x80, 0x244, 0xffffffe1, 0x81, 0x9, 0xfffffff9], &(0x7f0000000200)=[0x350, 0x40]}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x7, 0x2, 0x2, 0x4f, r0, 0x85, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) 05:35:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x28f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) bpf$MAP_CREATE(0x4, 0x0, 0x7) 05:35:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1f, 0x0, 0x4, 0x9, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x401, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0xffffffff, 0xfffff083, 0x9, 0x1000, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x38000000, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:35:45 executing program 2: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x8, 0x4) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0xa3, 0x100, 0x3, 0x4, 0x10000, 0x101, 0x100, 0xbd}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x8, 0x4) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x0, 0xa3, 0x100, 0x3, 0x4, 0x10000, 0x101, 0x100, 0xbd}) (async) 05:35:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:45 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x400, 0x0, 0xffffffffffffffff}) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1000, "3a05a60fa48cce1842cf9a3cb4bbfc25712bc681878a77fc8406ac39961303273afaf38b424668a3af3bac166224286d415342fb219954855b6cab9c756e3e89fccea49bd743575e3f62b5de061b54c6647f3ef65c2474bbb294b1c5cd1c99995d98e04ae58e83c7d986f4be3f111fd56cdfa62f42a94b32542d4c74e4c75be108ae7ebb84f48159aa552a827b326fd7a78c4e5c90021e3053f656c1e297688fb7e04c6283137e0e182b74675cc82a20ba51e26a031f694336457b0a31df1e63a9b0009e98c9223e772c6d290d3e4162475a21684dd579a6ef8bfd2f6a3f7dffd6a93fe987ac6fac3e669fd0f20df5ffd080cabb72a6d697cce79d78ba0257e7c7a2a0dc3d88fe2623ab7c141af0eb89f72add454a991928a5a38a15a0ff74da51c252d85d043b9c1c18287332c7c28909e68bc10c2b80d42cbdf7b8afdcf3e7f19057a2af379672e10505bc11e5050cb0a0018980a316bc903ecdf422e00c6a2c4950a22738d9a6b2d3d432a88b38c12d883336eedd8fab23e42f2f7cc695c2984375e1d61d1edd21460d01f3f65c0b5de88d6b4585b2e6a0a539d344970269a7fb628a08e17b474a643bcc7bdd2a25e2a67503450aae2e2151b4808fc2814a1cfc2518c727842dc7986092134dd4341c308d1b9aaad60f4e4f279674b4f2ff306f08befc64561741718226416e7c419c67f252eacd77121512db53f63076e025e77900f314bcbe328e5adf6b0c97275a0733484b106bf9d2bbcf6375352176f5dface10b9e531ebabfc9f10546c7b0ae697cade309fbde4a1ec1bf8b3301c0e9d8e75d944b7bf2842d542829ac158f66f82a206aea2ee0274e9b55697450401256afa5154ebc588b2b7a82af1f067e95f2cad82c9f345dac5e0c6b45acb373bb2113757d57803ee6d0fb9254a533d716db3f977b2aa37a4acde38270328058da028365af9de3f148568340ef985d67e8e5f2bfae7c9c2edcfc2a08e9147787bdc3f15b91c8d287b51510f492af97ed2ac22c68c11359d85b130d44596f2edce39aec110f1c04816479d1a3c9e38c9a8c7fcb98c01b94a90e983264bda9fe3421e9ca756668dc8f3e8979381c2051303107527c1f5c57f303ad988bbf8a7041d75aa5cc126e4fe32640e5dda2b69869d01747f9b7854443a9b7ef343083459e59ed53035a53b53944eaeeb3cc8132d241b39359046ae347d921a50e2b8194dc3207d568a86911518ca363b54655fe486aef9cf93f2f7761fc16401b8123fa5840e8cb27dc683c5175d4d23e320735bd5946e320a1fe2cadfcdd89aa6e478c25676e7eeece119d84805089f468753f31f9dc8b0309c559742f164aa621fb0389b038881af788224f01b12ed29422d5a50ff1f9e0382174f56be5458cba28722f309fa40285e0f07b1e6815003bb67a8cc571063297c102a5269e4c163acc4d3496ee09d37a3c63df0e4965ad42e7cee1da96ec10801497fde1f20a09fa9d6b6d2d572019a3a48a1f8b6440acd993be8c7165754077e87d9e324ed7599195b6c9d8d9d5445d0d9c86b52cdd30a3adc5e2054c403dd1d166ca4c1f3de4e3436157b9bab3876ec12915d53301101bc2a9eee4664f20791362e40d5c07d8eb67cbf42716d1a798934d3120c507466148d3a8c2bc96ae31d746866f36935e7134c71f9540a4776c1cf0b1da5006b35784d7f31d928ee8d9fcf2c4d21ba6f269b9b55188a981a152c51ee59faa98f9c6277a987c7a10b5ba2be5cfad0e1c737f479591c623667737b9605ac666779931ee00880b6f371f2d285a3b4801eb8532bc0f558e48d6b5cf7ab34bfbaade3baf9833351988aeb850176a40db38524fc2b96f8ca4ccf27ed9529b4d13f2e69db9918a962f59bfe12dfd7ce53298a9991c0870a1265d77855c7b6ae21704f1a03d1e304248a3729560f2b7ab1fe7919adaa1e1e6cbd0c2a7a6ad61a454c6585a053473935f0c37d3e4c5b42dc36ebec09b8b0380488a32628ec8f78924f239a98f84d19c0b6f10882cddd6f7e810fa38caa7e62d9615c0f001e6118a705eea60dfa40608d3299aa9e25064c9d37f5e3135eb6009faf2fa3651ea4e7e6835d1ec486701204024a3c1d0ca271afbe0c51a1dc080bb8147a2ed1df67c5ba3804d4e7bb404efd8aa43077563665c374f11e6e1bd1368f7895d0631caaddb8bd2f653fb71ee0831194cdf7a28efe2614650ff37b221e36ea2a3a54073666cf10a0be672985e7e7d9eac2a9f4d480733587ea0c62bc1bb36d45c44c11e789b4e4898e54f969435122d8f0e465f219080631b2b6d8a52c6315277ecd2c4d1c5f58595d382a982bc7db8e142bb3eab43965fcf52f871a1a0ea7f26da786ee43f91031b9854591775e5becaa94b0c662ad7fc4bca3f454da975e0b36d96c9648b24c6409de58f8aec7ad75391c268b15daaae42cea440fbc0c387b1086a0b663afcd4907af4deda45704a13734ab4cf5bdb6f0ebd54135b283612cc3b541efb48e003262762f069427717f6d3c5637dec9236debf8242d49a2f7d21b024661541ac3e03696ab8b031fa86713703238f7ff632c5600cb1c276b2b3ba9fa5980e8e8dfa401627b24b9e5e7f575dd12642147a0d7d8a2e082925a2e415e4e3ffa70f6eaaf2b08ec6b4cc2a6df3896d1c59c19d39cecba25eec227ee9e25f89f9aa1d3a5f9fcac3a0c06c4fdf0ac7033c04acfe48d4578cf13627896f36ba95578cbf357cfc88e38307d1faa96153d8f45417d73b9d37a0c5fb3ed35d432724b5ee7d2ec89d89e96f88954de876145f4d758373b5611b3ec77556bd3c7ef93e230c06230209480317d45bccfa5a95ce1e3829a9bb952b05f85f23cfa2aca13c423df34e14199d4125b06797469af9182b16e458da3bf1cf491e00573708f8bad6eeee4a7d97be63894ba7c4c9260300882fe8c00b6f3854cbc2ab24f4bdc32151a2f7b5c81e0dc70ed1039b56758b69ccb30a6e53145dd7a76dcce6006d74544e81e594c85cf93f33f702cfe6ec8b484a5cdf5f7f90d36ea22eab56887325541af7e593948dc93d90671d3ccbc85c8878dc0c638b5fd77ce5842f0ef2844a3a6aa8f5b6092f46f0eb70b3c5359ad608de5ebf18b41dc2b4a53e3ea556ee23715090a25f7020edce35fb0d6b636b8a8646456fe14af40a133b35b9e7c4d548d831136b080889e3c5c184f30e9e7f3a37ea67a265f35401baa5b8bedbf2d5d204b35dc92dc553ea851c6d45e1994bf7ada26c15f09adf58e38ece26484bb431c37cb73aaa99772080593598d7abc9ca606c34999d8d4b3cff5f490e2e76d2900e66c22cbd518564162f1032f637680877f0ad7d67c3857221233608156791caaa6515930d957b774e40eae5e3dcd432d8d13a141c7387df3c13ce277ff19610f25d8b081d62e8fb8c1ed32832c8bf7649e39aee1758f4997b00071ad1f66b6ef596066a06a3a2868ac784e2af655056717d7e230334935d4e1a111298db197dd5b0edcc690a64ac88687269ab99e05c40ca122ddc2e3cc24cbb577af64dc2f484306380ce8114b8aad4a78498f28bd885dcde11b3dc6015d4fbe80d6344591592c3a99c1f617c3884c276b3683c45adc759cb3505cbfcf4af805a40a224c070ac9c209bdd8d23c8c76c231c0ebe5f147e39002af00bb5b5e8f6aff3d556a407ee6c72579ba6d54e53d3bb1609890ba0af47906be8527d8b5c7552e0d4a2d9a54ab5e4fb928061c697d18ace4fb061aaf5c0496d6d48864ac06c41421decd58f09c6bf8491b431eb6887bb92f1a5f4969822454c148d9b3dc64ecaf71def8be1c8ecdb4fb73565bca74d04a2704682d53ba8a175be1b00792ef7946ae31cdaa4a4f26212eb5f2dd291461ce0f8846761c8328f4d4cfaded24eb714c8f11fbe347738b0a5c169f77953b4d99345bfaa4a6d613cc60b2d59919e2e03b5761d3cc6422dd2951ae323500144afae43fd1a61f4f083c2513d2430dec3001c0a5660b6fe57fb2aa525b9cb29ab8dc6a30daf46b6f20b02e5d2973703fd250be0e307374592a4083379ee7a776ce9be915591dcf2560fd84bf0a890f30c929609de5c10530d10be303b3d02a7caba3379209a8648b7cad59671d8455566f7d21904e22427acfbf307e46907a4f60519ede6b735fb3d605c11dcf0314bb296e908c33603fd5a4e029d9af1b16cd681c02f86f703d2756942133ca786dfde551a0a02102c3a503bae0b39934eba18dd7746b84eb275de077f86733f69e65f6d9bd18f9459be533aacaf35f56af122e04690b19608181126c8fdb503727a5aceaa8ab12e9fe173cb436aaeb4e3582211b21bc774ae43c151d6c9ae41726a125647895d7bf011e2bdedcdb5e9ad99502cacb6eab2a0811085d759e1e8058781258413650233771a73d984fa8a420bab81befd6cbc8c1423a358e5938fc3755f7a4d02eb6a23a09cf32f3ac7292c526ac0fad34e8c24691e4215892d30ed82020a5d583a9047226952a862b939a0b1788205917918615d28d7ecffbc9a52fd54e9da6f91eea6a26e95fb02e72b440406c99f731463e54a8dc636551a254e27beb65663082b41b8b671fcc274033f576aada5cb6bad06ed83bea8f7918454bbfb5afa641b47587934639833b85fa7f1a1f15e40c6262c7b049f4f394a72bcb9bb1afd351c925ef4f361ddfd6371aac07efd3ff10c86694782e98a5f6b27e3daec8cf4cef56b18a1a6d33c36f780d2b886f34fccf0be4322a12f0ae7ab883864ad191dcc741e29d832b64740505b3bba60146a44bdb06f95b3e17f07dd8b28710e60f8dc3a32ffbae7b8be3b09e49007250dbd4a1d4d5e13235e446c5ef807ef5386ca5133058b7b6549e83b42f9599810c8ae6a0881473a2d6b387afaf03d9dd68462e998b15ef301310a65ee3611bfe7127b2f006ee1fcb147e0ecaa781e51969dd27ecf25b7f35b4bf772921ccc18e2f23076fe8f73f8828b076d9bb958a54f3dc7aaad8fd5b2e977c68d6099284ac01447e11b514395d990757523e9ab5a888bfa2177c92387ca063de92bfcdf933a7c49842c1f64d45e35741aa5ea5189159807410139c0ba8330f4c3f2bae1fcb864d2ac1da7e0f7a8255ab0756166312621c5de604a7d975d4ddf3fdd16795a44f4aacf627c363bfefab4fd43c3d695890a9f1b735d91e361f74b2dbcc0e44b83c07cbf50e876c00bbe826c7c7b4ea35e6c971ac60e5f40d1102bfa560c91581b003cb404d3879b013ca2ca234880dbbd94dc146d3cf961ad07f032053cfce81f9581cfa525c681965a169df5b1ac703934146699240e7defe181a815d7cb89119170210bf48fd63571d525a27f9ecf233f4b6b0746b1dd4b2beec1a63b6ad12855cf40c20eedfd8ad5768227b2967c349b84d9d0c1f4b12bd5935ca168edb22328ff0f855d14b14e005b570e79249e4a91e052b06ed71b465af8e91ee542bc36bb6372ef082743792c2786474675dc56b3c8eef47521155a415812101d53082384628b048dc58237ad8729b299d035754229c662c1712a9ddcf8176fee835492c8fbaba2dda513cdeb56b6549f9bd1d7778f712a68891d9448f47aec4e34d596ad3987d90a31006fdcf8d7828e703f7139ccb1d32dabb952487df3255e03e0ef28d999c4dcd1ad422d0ecdbe2dae0b491771bb02a4dfae395595208186b8d17ef77f32b3f83832dc344de0a01dc71e10dbe2a326966ff4201dac181efc17af97d1aa53ed4e80df4884a5e8b2e4d941568a3e67f12001ef2e943b64b938717e8eafca8447b1bea6f90bc13ed5c0b9844ff6a6"}) (async) r2 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f00000010c0), 0x7fff, 0x6000) 05:35:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async, rerun: 64) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000140)=[0xdb, 0x1, 0x8, 0x9, 0x6], &(0x7f0000000180)=[0x400, 0xfffffffa, 0x0, 0x1, 0x3ff, 0xff6], 0x42, 0x6, 0x401, &(0x7f00000001c0)=[0x80, 0x244, 0xffffffe1, 0x81, 0x9, 0xfffffff9], &(0x7f0000000200)=[0x350, 0x40]}) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x7, 0x2, 0x2, 0x4f, r0, 0x85, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) 05:35:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1f, 0x0, 0x4, 0x9, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x401, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:35:45 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6313, 0x0, 0x100, 0x4, 0x2002], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, 0x0) r2 = socket(0x5, 0x5, 0x8) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x1, [0x7, 0x6], 0x7fff}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x81, 0x80, @scatter={0x4, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/207, 0xcf}]}, &(0x7f0000000400)="001000250f3701d9c385f90124e2fe999068bd4846e6ac65ee4cb743867a155e18a331300439b757f4cb491af4a80d246718402397f16fd0d13e185e0245fa6702d321a98cf5a1d172bc5cdb7b8585091798855b6e803cc9021b10420f22128c2f9c7502abc463e0e6f4bfc1254902f267d4f2e63471c18d7ea37ba73e9a7e2452", &(0x7f00000004c0)=""/153, 0x3f, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x2, 0x8, 0x800080000001, 0x8, r1}) bpf$MAP_CREATE(0x4, 0x0, 0x7) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 05:35:45 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x9, 0x6, 0x6, 0x3, 0x49d8, 0x3f, 0x8000}) r1 = socket(0x2, 0xa, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000080)={0x20, 0x7}) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) 05:35:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8da0}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8041) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r6) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x48, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x200}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x84) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x8, 0x5, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x541b, 0x0) 05:35:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1f, 0x0, 0x4, 0x9, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:35:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000140)=[0xdb, 0x1, 0x8, 0x9, 0x6], &(0x7f0000000180)=[0x400, 0xfffffffa, 0x0, 0x1, 0x3ff, 0xff6], 0x42, 0x6, 0x401, &(0x7f00000001c0)=[0x80, 0x244, 0xffffffe1, 0x81, 0x9, 0xfffffff9], &(0x7f0000000200)=[0x350, 0x40]}) (async, rerun: 64) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x7, 0x2, 0x2, 0x4f, r0, 0x85, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) [ 1627.821774][ C0] sd 0:0:1:0: [sda] tag#4704 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1627.832246][ C0] sd 0:0:1:0: [sda] tag#4704 CDB: Test Unit Ready [ 1627.838745][ C0] sd 0:0:1:0: [sda] tag#4704 CDB[00]: 00 10 00 25 0f 37 01 d9 c3 85 f9 01 24 e2 fe 99 [ 1627.848348][ C0] sd 0:0:1:0: [sda] tag#4704 CDB[10]: 90 68 bd 48 46 e6 ac 65 ee 4c b7 43 86 7a 15 5e [ 1627.857945][ C0] sd 0:0:1:0: [sda] tag#4704 CDB[20]: 18 a3 31 30 04 39 b7 57 f4 cb 49 1a f4 a8 0d 24 05:35:45 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x9, 0x6, 0x6, 0x3, 0x49d8, 0x3f, 0x8000}) (async) r1 = socket(0x2, 0xa, 0x0) (async, rerun: 32) socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000080)={0x20, 0x7}) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) 05:35:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) [ 1627.867561][ C0] sd 0:0:1:0: [sda] tag#4704 CDB[30]: 67 18 40 23 97 f1 6f d0 d1 3e 18 5e 02 45 fa 67 [ 1627.877630][ C0] sd 0:0:1:0: [sda] tag#4704 CDB[40]: 02 d3 21 a9 8c f5 a1 d1 72 bc 5c db 7b 85 85 09 [ 1627.887301][ C0] sd 0:0:1:0: [sda] tag#4704 CDB[50]: 17 98 85 5b 6e 80 3c c9 02 1b 10 42 0f 22 12 8c [ 1627.896932][ C0] sd 0:0:1:0: [sda] tag#4704 CDB[60]: 2f 9c 75 02 ab c4 63 e0 e6 f4 bf c1 25 49 02 f2 [ 1627.906555][ C0] sd 0:0:1:0: [sda] tag#4704 CDB[70]: 67 d4 f2 e6 34 71 c1 8d 7e a3 7b a7 3e 9a 7e 24 [ 1627.916209][ C0] sd 0:0:1:0: [sda] tag#4704 CDB[80]: 52 05:35:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:35:45 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6313, 0x0, 0x100, 0x4, 0x2002], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, 0x0) r2 = socket(0x5, 0x5, 0x8) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x1, [0x7, 0x6], 0x7fff}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x81, 0x80, @scatter={0x4, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/207, 0xcf}]}, &(0x7f0000000400)="001000250f3701d9c385f90124e2fe999068bd4846e6ac65ee4cb743867a155e18a331300439b757f4cb491af4a80d246718402397f16fd0d13e185e0245fa6702d321a98cf5a1d172bc5cdb7b8585091798855b6e803cc9021b10420f22128c2f9c7502abc463e0e6f4bfc1254902f267d4f2e63471c18d7ea37ba73e9a7e2452", &(0x7f00000004c0)=""/153, 0x3f, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x2, 0x8, 0x800080000001, 0x8, r1}) bpf$MAP_CREATE(0x4, 0x0, 0x7) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6313, 0x0, 0x100, 0x4, 0x2002], 0x5, 0x80000}) (async) getpgrp(0xffffffffffffffff) (async) syz_open_procfs(r1, 0x0) (async) socket(0x5, 0x5, 0x8) (async) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x1, [0x7, 0x6], 0x7fff}, 0x10) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x81, 0x80, @scatter={0x4, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/207, 0xcf}]}, &(0x7f0000000400)="001000250f3701d9c385f90124e2fe999068bd4846e6ac65ee4cb743867a155e18a331300439b757f4cb491af4a80d246718402397f16fd0d13e185e0245fa6702d321a98cf5a1d172bc5cdb7b8585091798855b6e803cc9021b10420f22128c2f9c7502abc463e0e6f4bfc1254902f267d4f2e63471c18d7ea37ba73e9a7e2452", &(0x7f00000004c0)=""/153, 0x3f, 0x0, 0x0, 0x0}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x2, 0x8, 0x800080000001, 0x8, r1}) (async) bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) (async) 05:35:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8da0}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8041) (async) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r6) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x48, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x200}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x84) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x8, 0x5, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x541b, 0x0) 05:35:46 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x9, 0x6, 0x6, 0x3, 0x49d8, 0x3f, 0x8000}) (async) r1 = socket(0x2, 0xa, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000080)={0x20, 0x7}) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) 05:35:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000d7f2a09587f70c7c692e1850b2b09b00", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x70}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7c000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x440c0) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) 05:35:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:46 executing program 4: r0 = socket(0x22, 0x4, 0x400) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) [ 1628.107480][ C1] sd 0:0:1:0: [sda] tag#4705 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1628.117979][ C1] sd 0:0:1:0: [sda] tag#4705 CDB: Test Unit Ready [ 1628.124424][ C1] sd 0:0:1:0: [sda] tag#4705 CDB[00]: 00 10 00 25 0f 37 01 d9 c3 85 f9 01 24 e2 fe 99 [ 1628.134101][ C1] sd 0:0:1:0: [sda] tag#4705 CDB[10]: 90 68 bd 48 46 e6 ac 65 ee 4c b7 43 86 7a 15 5e [ 1628.143730][ C1] sd 0:0:1:0: [sda] tag#4705 CDB[20]: 18 a3 31 30 04 39 b7 57 f4 cb 49 1a f4 a8 0d 24 05:35:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:46 executing program 4: r0 = socket(0x22, 0x4, 0x400) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket(0x22, 0x4, 0x400) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) [ 1628.153449][ C1] sd 0:0:1:0: [sda] tag#4705 CDB[30]: 67 18 40 23 97 f1 6f d0 d1 3e 18 5e 02 45 fa 67 [ 1628.163184][ C1] sd 0:0:1:0: [sda] tag#4705 CDB[40]: 02 d3 21 a9 8c f5 a1 d1 72 bc 5c db 7b 85 85 09 [ 1628.172903][ C1] sd 0:0:1:0: [sda] tag#4705 CDB[50]: 17 98 85 5b 6e 80 3c c9 02 1b 10 42 0f 22 12 8c [ 1628.182537][ C1] sd 0:0:1:0: [sda] tag#4705 CDB[60]: 2f 9c 75 02 ab c4 63 e0 e6 f4 bf c1 25 49 02 f2 [ 1628.192157][ C1] sd 0:0:1:0: [sda] tag#4705 CDB[70]: 67 d4 f2 e6 34 71 c1 8d 7e a3 7b a7 3e 9a 7e 24 [ 1628.201775][ C1] sd 0:0:1:0: [sda] tag#4705 CDB[80]: 52 05:35:46 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:46 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6313, 0x0, 0x100, 0x4, 0x2002], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, 0x0) (async) r2 = socket(0x5, 0x5, 0x8) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x1, [0x7, 0x6], 0x7fff}, 0x10) (async) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x81, 0x80, @scatter={0x4, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/207, 0xcf}]}, &(0x7f0000000400)="001000250f3701d9c385f90124e2fe999068bd4846e6ac65ee4cb743867a155e18a331300439b757f4cb491af4a80d246718402397f16fd0d13e185e0245fa6702d321a98cf5a1d172bc5cdb7b8585091798855b6e803cc9021b10420f22128c2f9c7502abc463e0e6f4bfc1254902f267d4f2e63471c18d7ea37ba73e9a7e2452", &(0x7f00000004c0)=""/153, 0x3f, 0x0, 0x0, 0x0}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x2, 0x8, 0x800080000001, 0x8, r1}) (async) bpf$MAP_CREATE(0x4, 0x0, 0x7) (async) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 05:35:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8da0}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8041) (async, rerun: 32) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r6) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x48, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x200}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x84) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x8, 0x5, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x541b, 0x0) 05:35:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000d7f2a09587f70c7c692e1850b2b09b00", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x70}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7c000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x440c0) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000d7f2a09587f70c7c692e1850b2b09b00", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) (async) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x70}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7c000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x440c0) (async) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) (async) 05:35:46 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:46 executing program 4: r0 = socket(0x22, 0x4, 0x400) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:46 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:46 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) 05:35:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000d7f2a09587f70c7c692e1850b2b09b00", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x70}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7c000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x440c0) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000d7f2a09587f70c7c692e1850b2b09b00", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) (async) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x70}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7c000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x440c0) (async) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) (async) 05:35:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:46 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:46 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) (async) 05:35:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:35:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:46 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) socket(0x2, 0xa, 0x0) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) (async) 05:35:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:35:46 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xffffffff, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:46 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) 05:35:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:46 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0xe2e2bf62, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:35:46 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0xffff}) 05:35:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:46 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xffffffff, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:46 executing program 4: r0 = socket(0x2b, 0xa, 0xffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000001c0)={r3, 0x3, &(0x7f00000000c0)=[0x4, 0x8, 0x5], &(0x7f0000000100)=[0xfffffff9, 0x8, 0x1, 0x81, 0x0], 0x0, 0x9, 0x40, &(0x7f0000000140)=[0x2, 0x8, 0x4, 0x913, 0x2, 0x3, 0x6, 0x81, 0x9], &(0x7f0000000180)=[0x0, 0x200]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8910, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:46 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x1aa, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:35:46 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0xffff}) 05:35:46 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0xffff}) 05:35:46 executing program 4: r0 = socket(0x2b, 0xa, 0xffff) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000001c0)={r3, 0x3, &(0x7f00000000c0)=[0x4, 0x8, 0x5], &(0x7f0000000100)=[0xfffffff9, 0x8, 0x1, 0x81, 0x0], 0x0, 0x9, 0x40, &(0x7f0000000140)=[0x2, 0x8, 0x4, 0x913, 0x2, 0x3, 0x6, 0x81, 0x9], &(0x7f0000000180)=[0x0, 0x200]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8910, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x5, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:35:46 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xffffffff, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:46 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:47 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x81) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, r0, 0x0, '\x00', r2, r1}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000240)=0x3aa2) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x3}) 05:35:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:47 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x10003}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$I2C_TIMEOUT(r3, 0x702, 0x26) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x11, 0x138100) ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000080)={r2, 0xfff}) 05:35:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x800, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:35:47 executing program 4: r0 = socket(0x2b, 0xa, 0xffff) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000001c0)={r3, 0x3, &(0x7f00000000c0)=[0x4, 0x8, 0x5], &(0x7f0000000100)=[0xfffffff9, 0x8, 0x1, 0x81, 0x0], 0x0, 0x9, 0x40, &(0x7f0000000140)=[0x2, 0x8, 0x4, 0x913, 0x2, 0x3, 0x6, 0x81, 0x9], &(0x7f0000000180)=[0x0, 0x200]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8910, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:47 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x10003}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$I2C_TIMEOUT(r3, 0x702, 0x26) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x11, 0x138100) ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000080)={r2, 0xfff}) 05:35:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x1000}, 0x48) 05:35:47 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x81) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, r0, 0x0, '\x00', r2, r1}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000240)=0x3aa2) (async) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x4) (async) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x3}) 05:35:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x53, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xcef5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:35:47 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x10003}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$I2C_TIMEOUT(r3, 0x702, 0x26) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x11, 0x138100) ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000080)={r2, 0xfff}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x10003}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) ioctl$I2C_TIMEOUT(r3, 0x702, 0x26) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x11, 0x138100) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000080)={r2, 0xfff}) (async) 05:35:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x53, 0x2) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x81) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, r0, 0x0, '\x00', r2, r1}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000240)=0x3aa2) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x3}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x81) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, r0, 0x0, '\x00', r2, r1}, 0x48) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000240)=0x3aa2) (async) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x4) (async) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x3}) (async) 05:35:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:35:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x414700, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x840, 0x4) 05:35:47 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x53, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket(0x2, 0xa, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x53, 0x2) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) 05:35:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a}, 0x48) 05:35:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000000)=0x80) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x7, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async, rerun: 32) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x414700, 0x0) (rerun: 32) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x840, 0x4) 05:35:47 executing program 4: r0 = socket(0x2, 0xa, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a}, 0x48) 05:35:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000000)=0x80) (async) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x7, 0x2) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (rerun: 32) 05:35:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 4: r0 = socket(0x2, 0xa, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a}, 0x48) 05:35:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x414700, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x840, 0x4) 05:35:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000000)=0x80) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x7, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:47 executing program 4: r0 = socket(0x2, 0xa, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (rerun: 64) 05:35:47 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='children\x00') 05:35:47 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:47 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x541b, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x105, 0x201) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0xff, 0x4, 0x1000, 0x2, 0xa, 0x75}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) 05:35:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:47 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:47 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x541b, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x105, 0x201) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0xff, 0x4, 0x1000, 0x2, 0xa, 0x75}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x541b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x105, 0x201) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0xff, 0x4, 0x1000, 0x2, 0xa, 0x75}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) (async) 05:35:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) syz_open_procfs(0x0, &(0x7f0000000000)='children\x00') 05:35:48 executing program 4: r0 = socket(0x26, 0xa, 0x3fd) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) 05:35:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf}, 0x48) 05:35:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 5: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:48 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x541b, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x105, 0x201) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0xff, 0x4, 0x1000, 0x2, 0xa, 0x75}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x541b, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x105, 0x201) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0xff, 0x4, 0x1000, 0x2, 0xa, 0x75}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) (async) 05:35:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) syz_open_procfs(0x0, &(0x7f0000000000)='children\x00') 05:35:48 executing program 4: r0 = socket(0x26, 0xa, 0x3fd) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) 05:35:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:48 executing program 5: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) 05:35:48 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x82e01) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40101, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x541b, 0x0) 05:35:48 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) (async) 05:35:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 4: r0 = socket(0x26, 0xa, 0x3fd) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) 05:35:48 executing program 5: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:48 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x82e01) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40101, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x541b, 0x0) 05:35:48 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) (async) 05:35:48 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:48 executing program 4: r0 = socket(0x2, 0x0, 0x100) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) getsockname(r1, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x82e01) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40101, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x541b, 0x0) 05:35:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x48) 05:35:48 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={0x7, 0x2, 0x7, 0x5, 0x2, 0x6, 0x1}) 05:35:48 executing program 5: sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x48) 05:35:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 5: sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:48 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={0x7, 0x2, 0x7, 0x5, 0x2, 0x6, 0x1}) (rerun: 32) 05:35:48 executing program 4: r0 = socket(0x2, 0x0, 0x100) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) getsockname(r1, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket(0x2, 0x0, 0x100) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) getsockname(r1, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) 05:35:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x48) 05:35:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 5: sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:48 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={0x7, 0x2, 0x7, 0x5, 0x2, 0x6, 0x1}) 05:35:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 4: r0 = socket(0x2, 0x0, 0x100) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) getsockname(r1, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 05:35:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:48 executing program 5: r0 = socket(0x0, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:48 executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbdf251000000708003a00faffffff08000600", @ANYRES32=0x0, @ANYBLOB="080031000100000008000300", @ANYRES32=0x0, @ANYBLOB="08002c00ff030000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x80000001}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]}) 05:35:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') (rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbdf251000000708003a00faffffff08000600", @ANYRES32=0x0, @ANYBLOB="080031000100000008000300", @ANYRES32=0x0, @ANYBLOB="08002c00ff030000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:49 executing program 5: r0 = socket(0x0, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:49 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x80000001}) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]}) 05:35:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 4: prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbdf251000000708003a00faffffff08000600", @ANYRES32=0x0, @ANYBLOB="080031000100000008000300", @ANYRES32=0x0, @ANYBLOB="08002c00ff030000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x80000001}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x80000001}) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]}) (async) 05:35:49 executing program 5: r0 = socket(0x0, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x82e01) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40101, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x541b, 0x0) 05:35:49 executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbdf251000000708003a00faffffff08000600", @ANYRES32=0x0, @ANYBLOB="080031000100000008000300", @ANYRES32=0x0, @ANYBLOB="08002c00ff030000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbdf251000000708003a00faffffff08000600", @ANYRES32=0x0, @ANYBLOB="080031000100000008000300", @ANYRES32=0x0, @ANYBLOB="08002c00ff030000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) 05:35:49 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="e6acf69709ea122cd8fe145027fbc786b234d0fa5d28e1ab2b021fcd111080961477828c0a2ac8894b01ec67dfd1711658fc5cb93f95cc4a0333e702ae94be3a52ade966bf5b86e477881093c7d94443b9b50c7b", 0x54) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x2, 0x2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x20400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000200)={0x8, 0x2002, 0xfffff805, 0xfffff6e8, 0xffffffff, 0x7fff, 0x200}) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x28002) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0xeb2f9bfcf279b6a0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}]}) ioctl$I2C_PEC(r4, 0x708, 0x40) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x820000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000380)={0x1000, 0x800, 0x8, 0xe, 0x6, 0x1b4, 0x4}) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000000)=[0x6, 0x5, 0xfffffff7, 0xffff, 0x80000001, 0x40, 0xffffffff, 0x4, 0x7f], 0x9}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x9, 0x4, 0x0, 0xffffffff}) 05:35:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/psched\x00') getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/l2cap\x00') getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0xf4, 0x81}, 0x48) 05:35:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 5: r0 = socket(0x2, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="e6acf69709ea122cd8fe145027fbc786b234d0fa5d28e1ab2b021fcd111080961477828c0a2ac8894b01ec67dfd1711658fc5cb93f95cc4a0333e702ae94be3a52ade966bf5b86e477881093c7d94443b9b50c7b", 0x54) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x2, 0x2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x20400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000200)={0x8, 0x2002, 0xfffff805, 0xfffff6e8, 0xffffffff, 0x7fff, 0x200}) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x28002) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0xeb2f9bfcf279b6a0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}]}) ioctl$I2C_PEC(r4, 0x708, 0x40) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x820000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000380)={0x1000, 0x800, 0x8, 0xe, 0x6, 0x1b4, 0x4}) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000000)=[0x6, 0x5, 0xfffffff7, 0xffff, 0x80000001, 0x40, 0xffffffff, 0x4, 0x7f], 0x9}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x9, 0x4, 0x0, 0xffffffff}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="e6acf69709ea122cd8fe145027fbc786b234d0fa5d28e1ab2b021fcd111080961477828c0a2ac8894b01ec67dfd1711658fc5cb93f95cc4a0333e702ae94be3a52ade966bf5b86e477881093c7d94443b9b50c7b", 0x54) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x2, 0x2) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x20400, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000200)={0x8, 0x2002, 0xfffff805, 0xfffff6e8, 0xffffffff, 0x7fff, 0x200}) (async) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x28002) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0xeb2f9bfcf279b6a0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}]}) (async) ioctl$I2C_PEC(r4, 0x708, 0x40) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x820000, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000380)={0x1000, 0x800, 0x8, 0xe, 0x6, 0x1b4, 0x4}) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000000)=[0x6, 0x5, 0xfffffff7, 0xffff, 0x80000001, 0x40, 0xffffffff, 0x4, 0x7f], 0x9}) (async) pipe(&(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x9, 0x4, 0x0, 0xffffffff}) (async) 05:35:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/psched\x00') getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/l2cap\x00') getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0xf4, 0x81}, 0x48) 05:35:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:49 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="e6acf69709ea122cd8fe145027fbc786b234d0fa5d28e1ab2b021fcd111080961477828c0a2ac8894b01ec67dfd1711658fc5cb93f95cc4a0333e702ae94be3a52ade966bf5b86e477881093c7d94443b9b50c7b", 0x54) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x2, 0x2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x20400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000200)={0x8, 0x2002, 0xfffff805, 0xfffff6e8, 0xffffffff, 0x7fff, 0x200}) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x28002) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0xeb2f9bfcf279b6a0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}]}) ioctl$I2C_PEC(r4, 0x708, 0x40) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x820000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000380)={0x1000, 0x800, 0x8, 0xe, 0x6, 0x1b4, 0x4}) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000000)=[0x6, 0x5, 0xfffffff7, 0xffff, 0x80000001, 0x40, 0xffffffff, 0x4, 0x7f], 0x9}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x9, 0x4, 0x0, 0xffffffff}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="e6acf69709ea122cd8fe145027fbc786b234d0fa5d28e1ab2b021fcd111080961477828c0a2ac8894b01ec67dfd1711658fc5cb93f95cc4a0333e702ae94be3a52ade966bf5b86e477881093c7d94443b9b50c7b", 0x54) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x2, 0x2) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x20400, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000200)={0x8, 0x2002, 0xfffff805, 0xfffff6e8, 0xffffffff, 0x7fff, 0x200}) (async) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x28002) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0xeb2f9bfcf279b6a0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}]}) (async) ioctl$I2C_PEC(r4, 0x708, 0x40) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x820000, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000380)={0x1000, 0x800, 0x8, 0xe, 0x6, 0x1b4, 0x4}) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000000)=[0x6, 0x5, 0xfffffff7, 0xffff, 0x80000001, 0x40, 0xffffffff, 0x4, 0x7f], 0x9}) (async) pipe(&(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x9, 0x4, 0x0, 0xffffffff}) (async) 05:35:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 64) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) (rerun: 64) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/psched\x00') getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/l2cap\x00') getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0xf4, 0x81}, 0x48) 05:35:49 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:49 executing program 5: r0 = socket(0x2, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0xffe0, &(0x7f00000000c0)=0x2) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x60002, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x101, &(0x7f00000001c0)=0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) 05:35:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async, rerun: 64) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0xffe0, &(0x7f00000000c0)=0x2) (rerun: 64) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x60002, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x101, &(0x7f00000001c0)=0x4) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) 05:35:49 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:50 executing program 5: r0 = socket(0x2, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0xffe0, &(0x7f00000000c0)=0x2) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x60002, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x101, &(0x7f00000001c0)=0x4) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) 05:35:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:50 executing program 0: setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0xa, 0x37, 0x10, 0x11, 0x3, 0xd9c, 0x0, 0x142, 0x1}) 05:35:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:50 executing program 5: socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:50 executing program 0: setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x2, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0xa, 0x37, 0x10, 0x11, 0x3, 0xd9c, 0x0, 0x142, 0x1}) 05:35:50 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:50 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:50 executing program 0: setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x2, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0xa, 0x37, 0x10, 0x11, 0x3, 0xd9c, 0x0, 0x142, 0x1}) 05:35:50 executing program 5: socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:50 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:50 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:50 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0xff, 0xa822, 0x1, 0x3, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48) 05:35:50 executing program 5: socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:50 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:50 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0xff, 0xa822, 0x1, 0x3, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x20000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0xff, 0xa822, 0x1, 0x3, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48) (async) 05:35:50 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:50 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x4) 05:35:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:50 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0xff, 0xa822, 0x1, 0x3, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48) 05:35:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0}, 0x48) 05:35:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:50 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x4) 05:35:50 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:50 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:50 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x4) 05:35:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0}, 0x48) 05:35:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:51 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:51 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:51 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0}, 0x48) 05:35:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:51 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:51 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:51 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0}, 0x48) 05:35:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0}, 0x48) 05:35:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x2, 0x80000000, 0x3634, 0x1a08, r3, 0x2, '\x00', 0x0, r4, 0x0, 0x5, 0x3}, 0x48) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0}, 0x48) 05:35:51 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0}, 0x48) 05:35:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x2, 0x80000000, 0x3634, 0x1a08, r3, 0x2, '\x00', 0x0, r4, 0x0, 0x5, 0x3}, 0x48) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x4, 0x8, 0x5de0}, 0x48) 05:35:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0}, 0x48) 05:35:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0}, 0x48) 05:35:51 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, 0x0}, 0x4) 05:35:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0}, 0x48) 05:35:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0}, 0x48) 05:35:51 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, 0x0}, 0x4) 05:35:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x2, 0x80000000, 0x3634, 0x1a08, r3, 0x2, '\x00', 0x0, r4, 0x0, 0x5, 0x3}, 0x48) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x2, 0x80000000, 0x3634, 0x1a08, r3, 0x2, '\x00', 0x0, r4, 0x0, 0x5, 0x3}, 0x48) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0}, 0x48) 05:35:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0}, 0x48) 05:35:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xfff, 0x3, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, 0x48) 05:35:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x2, 0x80000000, 0x3634, 0x1a08, r3, 0x2, '\x00', 0x0, r4, 0x0, 0x5, 0x3}, 0x48) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0}, 0x48) 05:35:51 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, 0x0}, 0x4) 05:35:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0}, 0x48) 05:35:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xfff, 0x3, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, 0x48) 05:35:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0}, 0x48) 05:35:51 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={0x0}}, 0x4) 05:35:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x2, 0x80000000, 0x3634, 0x1a08, r3, 0x2, '\x00', 0x0, r4, 0x0, 0x5, 0x3}, 0x48) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8}, 0x48) 05:35:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xfff, 0x3, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xfff, 0x3, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, 0x48) (async) 05:35:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0}, 0x48) 05:35:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000140)={&(0x7f00000000c0)="9aa5bd39a164acf4418b53e588a2ee2ea3842c1675e76b41f6616d2c681c21b1010af51cce65b72a3f089c88e18cd7f75621b8a2636e45123891263e7d4f2d3fa6acdd6042cacf6c7eb499361c22208615e71634841fe4f01ae76b90eef8b0616a78a91c84119b27ffa2ac", 0x6b}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 05:35:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8}, 0x48) 05:35:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x2, 0x80000000, 0x3634, 0x1a08, r3, 0x2, '\x00', 0x0, r4, 0x0, 0x5, 0x3}, 0x48) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:51 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={0x0}}, 0x0) 05:35:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x0, 0x5de0}, 0x48) 05:35:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async, rerun: 64) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000140)={&(0x7f00000000c0)="9aa5bd39a164acf4418b53e588a2ee2ea3842c1675e76b41f6616d2c681c21b1010af51cce65b72a3f089c88e18cd7f75621b8a2636e45123891263e7d4f2d3fa6acdd6042cacf6c7eb499361c22208615e71634841fe4f01ae76b90eef8b0616a78a91c84119b27ffa2ac", 0x6b}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (rerun: 64) 05:35:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8}, 0x48) 05:35:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x2, 0x80000000, 0x3634, 0x1a08, r3, 0x2, '\x00', 0x0, r4, 0x0, 0x5, 0x3}, 0x48) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8}, 0x48) 05:35:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x2, 0x80000000, 0x3634, 0x1a08, r3, 0x2, '\x00', 0x0, r4, 0x0, 0x5, 0x3}, 0x48) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000140)={&(0x7f00000000c0)="9aa5bd39a164acf4418b53e588a2ee2ea3842c1675e76b41f6616d2c681c21b1010af51cce65b72a3f089c88e18cd7f75621b8a2636e45123891263e7d4f2d3fa6acdd6042cacf6c7eb499361c22208615e71634841fe4f01ae76b90eef8b0616a78a91c84119b27ffa2ac", 0x6b}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 05:35:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8}, 0x48) 05:35:52 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:52 executing program 0: socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 05:35:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:52 executing program 3: r0 = socket(0x2, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8}, 0x48) 05:35:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:52 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:52 executing program 0: socket$kcm(0x29, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 05:35:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0}, 0x48) 05:35:52 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:52 executing program 0: socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 05:35:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x8, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:52 executing program 2: sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:52 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6313, 0x0, 0x100, 0x4, 0x2002], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, 0x0) r2 = socket(0x5, 0x5, 0x8) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x1, [0x7, 0x6], 0x7fff}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x81, 0x80, @scatter={0x4, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/207, 0xcf}]}, &(0x7f0000000400)="001000250f3701d9c385f90124e2fe999068bd4846e6ac65ee4cb743867a155e18a331300439b757f4cb491af4a80d246718402397f16fd0d13e185e0245fa6702d321a98cf5a1d172bc5cdb7b8585091798855b6e803cc9021b10420f22128c2f9c7502abc463e0e6f4bfc1254902f267d4f2e63471c18d7ea37ba73e9a7e2452", &(0x7f00000004c0)=""/153, 0x3f, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x2, 0x8, 0x800080000001, 0x8, r1}) bpf$MAP_CREATE(0x4, 0x0, 0x7) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 05:35:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:52 executing program 2: sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:52 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6313, 0x0, 0x100, 0x4, 0x2002], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, 0x0) r2 = socket(0x5, 0x5, 0x8) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x1, [0x7, 0x6], 0x7fff}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x81, 0x80, @scatter={0x4, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/207, 0xcf}]}, &(0x7f0000000400)="001000250f3701d9c385f90124e2fe999068bd4846e6ac65ee4cb743867a155e18a331300439b757f4cb491af4a80d246718402397f16fd0d13e185e0245fa6702d321a98cf5a1d172bc5cdb7b8585091798855b6e803cc9021b10420f22128c2f9c7502abc463e0e6f4bfc1254902f267d4f2e63471c18d7ea37ba73e9a7e2452", &(0x7f00000004c0)=""/153, 0x3f, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x2, 0x8, 0x800080000001, 0x8, r1}) bpf$MAP_CREATE(0x4, 0x0, 0x7) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 05:35:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:52 executing program 3: bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) bpf$MAP_CREATE(0x4, 0x0, 0xfffffffffffffdcb) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001c011}, 0x30000004) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) [ 1634.810969][ C1] sd 0:0:1:0: [sda] tag#4710 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1634.821421][ C1] sd 0:0:1:0: [sda] tag#4710 CDB: Test Unit Ready [ 1634.827980][ C1] sd 0:0:1:0: [sda] tag#4710 CDB[00]: 00 10 00 25 0f 37 01 d9 c3 85 f9 01 24 e2 fe 99 [ 1634.837602][ C1] sd 0:0:1:0: [sda] tag#4710 CDB[10]: 90 68 bd 48 46 e6 ac 65 ee 4c b7 43 86 7a 15 5e [ 1634.847286][ C1] sd 0:0:1:0: [sda] tag#4710 CDB[20]: 18 a3 31 30 04 39 b7 57 f4 cb 49 1a f4 a8 0d 24 [ 1634.856918][ C1] sd 0:0:1:0: [sda] tag#4710 CDB[30]: 67 18 40 23 97 f1 6f d0 d1 3e 18 5e 02 45 fa 67 [ 1634.859559][ C0] sd 0:0:1:0: [sda] tag#4711 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1634.866569][ C1] sd 0:0:1:0: [sda] tag#4710 CDB[40]: 02 d3 21 a9 8c f5 a1 d1 72 bc 5c db 7b 85 85 09 [ 1634.876898][ C0] sd 0:0:1:0: [sda] tag#4711 CDB: Test Unit Ready [ 1634.886447][ C1] sd 0:0:1:0: [sda] tag#4710 CDB[50]: 17 98 85 5b 6e 80 3c c9 02 1b 10 42 0f 22 12 8c [ 1634.892855][ C0] sd 0:0:1:0: [sda] tag#4711 CDB[00]: 00 10 00 25 0f 37 01 d9 c3 85 f9 01 24 e2 fe 99 [ 1634.892884][ C0] sd 0:0:1:0: [sda] tag#4711 CDB[10]: 90 68 bd 48 46 e6 ac 65 ee 4c b7 43 86 7a 15 5e [ 1634.902436][ C1] sd 0:0:1:0: [sda] tag#4710 CDB[60]: 2f 9c 75 02 ab c4 63 e0 e6 f4 bf c1 25 49 02 f2 [ 1634.911996][ C0] sd 0:0:1:0: [sda] tag#4711 CDB[20]: 18 a3 31 30 04 39 b7 57 f4 cb 49 1a f4 a8 0d 24 [ 1634.921554][ C1] sd 0:0:1:0: [sda] tag#4710 CDB[70]: 67 d4 f2 e6 34 71 c1 8d 7e a3 7b a7 3e 9a 7e 24 [ 1634.931222][ C0] sd 0:0:1:0: [sda] tag#4711 CDB[30]: 67 18 40 23 97 f1 6f d0 d1 3e 18 5e 02 45 fa 67 05:35:53 executing program 0: bpf$MAP_CREATE(0x2, 0x0, 0x7) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 05:35:53 executing program 3: ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000300), 0x3, 0x4a00) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x6, 0x80000000000ff}) bpf$MAP_CREATE(0x3, 0x0, 0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2e0581, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="7bebfc265352739420f148423f22c0bf8b7ed09095eee7720ca23d2b89711afe3a3c29d4339284e728e38af43c73be445d486381cd74d2b2e712e71ae7c158e0c2d5bf2633ef49e30861d5223ff2e815527b132dc77bfb8a74d9dae0d2", @ANYRES16=r3, @ANYBLOB="000326bd7000ffdbdf25120000000500300000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4040000) 05:35:53 executing program 2: sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) [ 1634.940817][ C1] sd 0:0:1:0: [sda] tag#4710 CDB[80]: 52 [ 1634.950377][ C0] sd 0:0:1:0: [sda] tag#4711 CDB[40]: 02 d3 21 a9 8c f5 a1 d1 72 bc 5c db 7b 85 85 09 [ 1634.975120][ C0] sd 0:0:1:0: [sda] tag#4711 CDB[50]: 17 98 85 5b 6e 80 3c c9 02 1b 10 42 0f 22 12 8c [ 1634.984737][ C0] sd 0:0:1:0: [sda] tag#4711 CDB[60]: 2f 9c 75 02 ab c4 63 e0 e6 f4 bf c1 25 49 02 f2 [ 1634.994379][ C0] sd 0:0:1:0: [sda] tag#4711 CDB[70]: 67 d4 f2 e6 34 71 c1 8d 7e a3 7b a7 3e 9a 7e 24 [ 1635.003988][ C0] sd 0:0:1:0: [sda] tag#4711 CDB[80]: 52 05:35:53 executing program 2: r0 = socket(0x0, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:53 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x40000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0x8ff, &(0x7f00000001c0)=0x2) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000100)=""/46, &(0x7f0000000140)=0x2e) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x8000) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000002c0), 0x4) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000240)) 05:35:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x3) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)={'gretap0', 0x32, 0x32}, 0xa) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9220000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf250700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d0001000000050035003f00000005de2e00000000000500350020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) 05:35:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x3) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)={'gretap0', 0x32, 0x32}, 0xa) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9220000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf250700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d0001000000050035003f00000005de2e00000000000500350020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) 05:35:53 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcf77}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x4c}}, 0x8000) 05:35:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:53 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000040)={0x0, 0x4e4c2363a3a55694}) bpf$MAP_CREATE(0x4, 0x0, 0x7) pipe(&(0x7f0000000080)) 05:35:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x3) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)={'gretap0', 0x32, 0x32}, 0xa) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9220000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf250700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d0001000000050035003f00000005de2e00000000000500350020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) 05:35:53 executing program 2: r0 = socket(0x0, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:53 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:53 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x50fe, 0x7fff, 0x8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x541b, 0x0) 05:35:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) bpf$MAP_CREATE(0x2, 0x0, 0x7) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) 05:35:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x3) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)={'gretap0', 0x32, 0x32}, 0xa) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9220000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf250700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d0001000000050035003f00000005de2e00000000000500350020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 05:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) r3 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000080), 0x2) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x101, 0x0, 0x1, 0x6}, {0x9, 0x3f, 0x0, 0x7fff}, {0x0, 0xcf, 0x3, 0x80000001}, {0x7, 0x5, 0x7, 0x3}]}, 0x10) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x308402) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f00000001c0)={r6}) 05:35:53 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:53 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa932}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48014) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) bpf$MAP_CREATE(0x4, 0x0, 0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x10}, 0xc) 05:35:53 executing program 2: r0 = socket(0x0, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:53 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:35:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x3) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)={'gretap0', 0x32, 0x32}, 0xa) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9220000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf250700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d0001000000050035003f00000005de2e00000000000500350020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) 05:35:53 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x328, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000100)={0x7, 0x1f, 0xff, 0xfffffff7, 0x9, 0x10001}) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0x541b, 0x0) 05:35:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:53 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa932}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48014) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) bpf$MAP_CREATE(0x4, 0x0, 0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x10}, 0xc) 05:35:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:53 executing program 2: r0 = socket(0x2, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x3) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)={'gretap0', 0x32, 0x32}, 0xa) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9220000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf250700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d0001000000050035003f00000005de2e00000000000500350020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 05:35:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x8, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:53 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x328, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000100)={0x7, 0x1f, 0xff, 0xfffffff7, 0x9, 0x10001}) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0x541b, 0x0) 05:35:53 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa932}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48014) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) bpf$MAP_CREATE(0x4, 0x0, 0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x10}, 0xc) 05:35:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x3) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)={'gretap0', 0x32, 0x32}, 0xa) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') 05:35:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x5de0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:53 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x328, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000100)={0x7, 0x1f, 0xff, 0xfffffff7, 0x9, 0x10001}) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0x541b, 0x0) 05:35:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa932}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48014) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) bpf$MAP_CREATE(0x4, 0x0, 0x7) 05:35:54 executing program 2: r0 = socket(0x2, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x3) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)={'gretap0', 0x32, 0x32}, 0xa) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x3) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:54 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x328, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000000100)={0x7, 0x1f, 0xff, 0xfffffff7, 0x9, 0x10001}) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa932}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48014) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) 05:35:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x3) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:54 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x328, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:54 executing program 2: r0 = socket(0x2, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa932}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48014) socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:54 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x328, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa932}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48014) getsockopt$sock_buf(r1, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:54 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:54 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x328, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 05:35:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) getsockopt$sock_buf(r1, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:54 executing program 2: socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:54 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x328, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:54 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x5de0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 05:35:54 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x328, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:54 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = socket(0x2a, 0x2, 0x3) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) getsockopt$sock_buf(r1, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:54 executing program 2: socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x5de0}, 0x48) 05:35:54 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:54 executing program 0: r0 = socket(0x2a, 0x2, 0x3) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) getsockopt$sock_buf(r1, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:54 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x328, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x840) 05:35:54 executing program 2: socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="8fba420c4a272710255aef9aea9f32245b8d6057f3aef711f1a3ecf28eee3d7ad04da199534ef2f40cda8ebbab1248d0910ca90021c04a9279808d50a4d62d19e302465b25b143cd39c781f0168e40a86194fb5c5b624a9d1fd2130e7e0a5cac93b1196febb9b7a226a6fa60162d301253bf52244e038aa019801cc9bc933eb3092d5f6ea4fb735af394f9ad29f8b3b1f30017c350529f75f2c0383a4ec1acdcf55361be50e69e1a4ec6f044990d820708961730784f2cc739c416dfd9d7775b0000c775a4a964f55a60a9f1814ceb9406e949c77f79392347ca8c94a4dff6f05e039d", 0xe3}}, 0x4) 05:35:54 executing program 0: r0 = socket(0x0, 0x2, 0x3) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:54 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x328, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r1, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:54 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:54 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x4) 05:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x840) 05:35:55 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x4) 05:35:55 executing program 1: bpf$MAP_CREATE(0x4, 0x0, 0x4c) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='io\x00') ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000000c0)) r2 = getpgrp(0xffffffffffffffff) syz_open_procfs(r2, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x7ff, 0x5ca, 0x8000000080000001, 0x200, r2}) syz_open_procfs(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpgid(r0) 05:35:55 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x840) 05:35:55 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:55 executing program 0: r0 = socket(0x0, 0x2, 0x3) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:55 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:55 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x4) 05:35:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x840) 05:35:55 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddb000800320009000000050030000100000008002b000900000008000b000100000008003b0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:55 executing program 0: r0 = socket(0x0, 0x2, 0x3) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:55 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) 05:35:55 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:55 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:55 executing program 1: bpf$MAP_CREATE(0x4, 0x0, 0x4c) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='io\x00') ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000000c0)) r2 = getpgrp(0xffffffffffffffff) syz_open_procfs(r2, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x7ff, 0x5ca, 0x8000000080000001, 0x200, r2}) syz_open_procfs(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpgid(r0) 05:35:55 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:55 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) 05:35:55 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:55 executing program 0: r0 = socket(0x2a, 0x0, 0x3) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:55 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) 05:35:55 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000000c0)=0x1) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000080)) bpf$MAP_CREATE(0x2, 0x0, 0xffffffffffffffed) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x24, 0x4, 0xfffffffe}, {0x0, 0xb4, 0x3f, 0x9}, {0x3, 0x8, 0x2, 0x8000}]}, 0x10) 05:35:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:55 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:55 executing program 0: r0 = socket(0x2a, 0x0, 0x3) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:55 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4) 05:35:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:55 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:55 executing program 0: r0 = socket(0x2a, 0x0, 0x3) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:55 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:55 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 05:35:55 executing program 1: bpf$MAP_CREATE(0x2, 0x0, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8402, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x200, 0x70bd27, 0x25dfdbf9, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}]}, 0x64}}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x408, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x54}}, 0x4000000) 05:35:55 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:55 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:55 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:55 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x81}, 0x48) 05:35:55 executing program 0: socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:55 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:55 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r2, 0xa}, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000098b92c4282ddd2958130d396e59f48ab232dfa29e985739f107f93d3df8e0c967f4f03bfc028280948a4b9d917c138cb412c9d56578b14d76baee9baa3d30d695d426621f6b6779c1b30aaa6ca3735a555b2754e62fdf384a0dbed2bdc15fc66f00e8cd1a45b41777a0f81b791a20ba18b088259685fc7de9bd9b6f54640253dbcea9b1874edaec337121b699f711541048716cc35ed1133ec6f1d6d2eb7", @ANYRES16=r3, @ANYBLOB="200027bd7000fedbdf25d07d1a2c06001c000080000046d5bf81d56e36a51b36f024268a8bb9d8b1f66203f67f6a0d8eec29b3ba6ea718bd48f3c43e6d48631e12c7e8cca2ed46f2cd27"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x439482, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000140)=0xf4a2, &(0x7f0000000180)=0x4) 05:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:55 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:56 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000000)={0x9}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x400000) 05:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:56 executing program 0: socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:56 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x244940, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket(0x2, 0x6, 0x0) 05:35:56 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r2, 0xa}, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000098b92c4282ddd2958130d396e59f48ab232dfa29e985739f107f93d3df8e0c967f4f03bfc028280948a4b9d917c138cb412c9d56578b14d76baee9baa3d30d695d426621f6b6779c1b30aaa6ca3735a555b2754e62fdf384a0dbed2bdc15fc66f00e8cd1a45b41777a0f81b791a20ba18b088259685fc7de9bd9b6f54640253dbcea9b1874edaec337121b699f711541048716cc35ed1133ec6f1d6d2eb7", @ANYRES16=r3, @ANYBLOB="200027bd7000fedbdf25d07d1a2c06001c000080000046d5bf81d56e36a51b36f024268a8bb9d8b1f66203f67f6a0d8eec29b3ba6ea718bd48f3c43e6d48631e12c7e8cca2ed46f2cd27"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x439482, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000140)=0xf4a2, &(0x7f0000000180)=0x4) 05:35:56 executing program 0: socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:56 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:56 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x244940, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket(0x2, 0x6, 0x0) 05:35:56 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r2, 0xa}, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000098b92c4282ddd2958130d396e59f48ab232dfa29e985739f107f93d3df8e0c967f4f03bfc028280948a4b9d917c138cb412c9d56578b14d76baee9baa3d30d695d426621f6b6779c1b30aaa6ca3735a555b2754e62fdf384a0dbed2bdc15fc66f00e8cd1a45b41777a0f81b791a20ba18b088259685fc7de9bd9b6f54640253dbcea9b1874edaec337121b699f711541048716cc35ed1133ec6f1d6d2eb7", @ANYRES16=r3, @ANYBLOB="200027bd7000fedbdf25d07d1a2c06001c000080000046d5bf81d56e36a51b36f024268a8bb9d8b1f66203f67f6a0d8eec29b3ba6ea718bd48f3c43e6d48631e12c7e8cca2ed46f2cd27"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x439482, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000140)=0xf4a2, &(0x7f0000000180)=0x4) 05:35:56 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x880) 05:35:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f00000002c0)=""/134, &(0x7f0000000140)=0x86) 05:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:56 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:56 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x244940, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket(0x2, 0x6, 0x0) 05:35:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0xa, 0x0, &(0x7f0000000140)) 05:35:56 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x880) 05:35:56 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r2, 0xa}, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000098b92c4282ddd2958130d396e59f48ab232dfa29e985739f107f93d3df8e0c967f4f03bfc028280948a4b9d917c138cb412c9d56578b14d76baee9baa3d30d695d426621f6b6779c1b30aaa6ca3735a555b2754e62fdf384a0dbed2bdc15fc66f00e8cd1a45b41777a0f81b791a20ba18b088259685fc7de9bd9b6f54640253dbcea9b1874edaec337121b699f711541048716cc35ed1133ec6f1d6d2eb7", @ANYRES16=r3, @ANYBLOB="200027bd7000fedbdf25d07d1a2c06001c000080000046d5bf81d56e36a51b36f024268a8bb9d8b1f66203f67f6a0d8eec29b3ba6ea718bd48f3c43e6d48631e12c7e8cca2ed46f2cd27"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x439482, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) 05:35:56 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:56 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r2, 0xa}, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000098b92c4282ddd2958130d396e59f48ab232dfa29e985739f107f93d3df8e0c967f4f03bfc028280948a4b9d917c138cb412c9d56578b14d76baee9baa3d30d695d426621f6b6779c1b30aaa6ca3735a555b2754e62fdf384a0dbed2bdc15fc66f00e8cd1a45b41777a0f81b791a20ba18b088259685fc7de9bd9b6f54640253dbcea9b1874edaec337121b699f711541048716cc35ed1133ec6f1d6d2eb7", @ANYRES16=r3, @ANYBLOB="200027bd7000fedbdf25d07d1a2c06001c000080000046d5bf81d56e36a51b36f024268a8bb9d8b1f66203f67f6a0d8eec29b3ba6ea718bd48f3c43e6d48631e12c7e8cca2ed46f2cd27"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x439482, 0x0) 05:35:56 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x244940, 0x0) socket(0x2, 0x6, 0x0) 05:35:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0xa, 0x0, 0x0) 05:35:56 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x880) 05:35:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0xa, 0x0, 0x0) 05:35:56 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r2, 0xa}, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000098b92c4282ddd2958130d396e59f48ab232dfa29e985739f107f93d3df8e0c967f4f03bfc028280948a4b9d917c138cb412c9d56578b14d76baee9baa3d30d695d426621f6b6779c1b30aaa6ca3735a555b2754e62fdf384a0dbed2bdc15fc66f00e8cd1a45b41777a0f81b791a20ba18b088259685fc7de9bd9b6f54640253dbcea9b1874edaec337121b699f711541048716cc35ed1133ec6f1d6d2eb7", @ANYRES16=r3, @ANYBLOB="200027bd7000fedbdf25d07d1a2c06001c000080000046d5bf81d56e36a51b36f024268a8bb9d8b1f66203f67f6a0d8eec29b3ba6ea718bd48f3c43e6d48631e12c7e8cca2ed46f2cd27"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) 05:35:56 executing program 2: socket(0x2, 0x6, 0x0) 05:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:56 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0xa, 0x0, 0x0) 05:35:56 executing program 2: socket(0x2, 0x6, 0x0) 05:35:56 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r2, 0xa}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:56 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddb0008003200090000000500300001000000"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:56 executing program 2: socket(0x0, 0x6, 0x0) 05:35:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:56 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:56 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:57 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x880) 05:35:57 executing program 2: socket(0x0, 0x6, 0x0) 05:35:57 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:57 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x880) 05:35:57 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 5: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 2: socket(0x0, 0x6, 0x0) 05:35:57 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:57 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:57 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 5: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:57 executing program 2: socket(0x2, 0x0, 0x0) 05:35:57 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:57 executing program 5: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 05:35:57 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:57 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:57 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 05:35:57 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:57 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:57 executing program 2: socket(0x2, 0x0, 0x0) 05:35:57 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 05:35:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 05:35:57 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:57 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:57 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 05:35:57 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:57 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 2: socket(0x2, 0x0, 0x0) 05:35:57 executing program 0: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:57 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 05:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:58 executing program 0: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:58 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:58 executing program 1: r0 = socket(0x0, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:58 executing program 0: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:58 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x80020001}) 05:35:58 executing program 1: r0 = socket(0x0, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:58 executing program 0: r0 = socket(0x0, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:58 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80020001}) 05:35:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 05:35:58 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x244940, 0x0) socket(0x2, 0x6, 0x0) 05:35:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:58 executing program 1: r0 = socket(0x0, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020001}) 05:35:58 executing program 0: r0 = socket(0x0, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 05:35:58 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x244940, 0x0) socket(0x2, 0x6, 0x0) 05:35:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)) 05:35:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 05:35:58 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x244940, 0x0) socket(0x2, 0x6, 0x0) 05:35:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:58 executing program 1: r0 = socket(0x2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:58 executing program 0: r0 = socket(0x0, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 05:35:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:58 executing program 2: socket(0x2, 0x6, 0x0) 05:35:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:58 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x1, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:58 executing program 0: r0 = socket(0x2a, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:58 executing program 2: socket(0x0, 0x6, 0x0) 05:35:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:59 executing program 1: r0 = socket(0x2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:59 executing program 0: r0 = socket(0x2a, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:59 executing program 2: socket(0x0, 0x6, 0x0) 05:35:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x80020001}) 05:35:59 executing program 0: r0 = socket(0x2a, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:59 executing program 2: socket(0x0, 0x6, 0x0) 05:35:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80020001}) 05:35:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:59 executing program 1: r0 = socket(0x2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:59 executing program 0: socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:59 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020001}) 05:35:59 executing program 2: socket(0x2, 0x0, 0x0) 05:35:59 executing program 0: socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:59 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)) 05:35:59 executing program 0: socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:35:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:59 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) 05:35:59 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x44}, 0x1, 0x0, 0x0, 0x44008081}, 0x840) 05:35:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x44}}, 0x840) 05:35:59 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x0) 05:35:59 executing program 2: socket(0x2, 0x0, 0x0) 05:35:59 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:59 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) 05:35:59 executing program 5: r0 = socket(0x2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:35:59 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x0) 05:35:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x44}}, 0x0) 05:35:59 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:59 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) 05:35:59 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x0) 05:35:59 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x1, 0x209b, 0x439, 0x8a1, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x48) r1 = socket(0xf, 0x1, 0x1000) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 05:35:59 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:35:59 executing program 1: socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 05:36:00 executing program 2: socket(0x2, 0x0, 0x0) 05:36:00 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:36:00 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x1, 0x209b, 0x439, 0x8a1, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x48) r1 = socket(0xf, 0x1, 0x1000) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 05:36:00 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xd114, 0x84f44271, 0x4}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x1e, 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4f3f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040804}, 0x4040011) 05:36:00 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:36:00 executing program 1: socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 05:36:00 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:36:00 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:36:00 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x1, 0x209b, 0x439, 0x8a1, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x48) r1 = socket(0xf, 0x1, 0x1000) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 05:36:00 executing program 5: r0 = bpf$MAP_CREATE(0x3, 0x0, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe28047787a878a7a, 0x3, 0x1, 0x20, 0x46c, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:00 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x0, 0xa4, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:36:00 executing program 1: socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 05:36:00 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:36:00 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x1c9, 0x1, 0x7, 0x908, 0xffffffffffffffff, 0x5a, '\x00', 0x0, r0, 0x4, 0x0, 0x4, 0xa}, 0x48) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf315, 0x24800) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x80, 0x0, 0x2}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x2) 05:36:00 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x1, 0x209b, 0x439, 0x8a1, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x48) socket(0xf, 0x1, 0x1000) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 05:36:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 05:36:00 executing program 0: bpf$MAP_CREATE(0x4, 0x0, 0x7) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x8c200, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 05:36:00 executing program 5: r0 = bpf$MAP_CREATE(0x3, 0x0, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe28047787a878a7a, 0x3, 0x1, 0x20, 0x46c, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:00 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$MAP_CREATE(0x4, 0x0, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x410442, 0x0) ioctl$I2C_TIMEOUT(r0, 0x702, 0x10001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) 05:36:00 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x1c9, 0x1, 0x7, 0x908, 0xffffffffffffffff, 0x5a, '\x00', 0x0, r0, 0x4, 0x0, 0x4, 0xa}, 0x48) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf315, 0x24800) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x80, 0x0, 0x2}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x2) 05:36:00 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x1, 0x209b, 0x439, 0x8a1, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x48) socket(0xf, 0x1, 0x1000) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) 05:36:00 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8447}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0x4004880) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x8028040}, 0xc) socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) 05:36:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 05:36:00 executing program 5: r0 = bpf$MAP_CREATE(0x3, 0x0, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe28047787a878a7a, 0x3, 0x1, 0x20, 0x46c, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:00 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xe) getsockname(r1, &(0x7f0000000000)=@l2tp, &(0x7f0000000080)=0x80) 05:36:00 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x1c9, 0x1, 0x7, 0x908, 0xffffffffffffffff, 0x5a, '\x00', 0x0, r0, 0x4, 0x0, 0x4, 0xa}, 0x48) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf315, 0x24800) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x80, 0x0, 0x2}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x2) 05:36:00 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x1, 0x209b, 0x439, 0x8a1, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x48) socket(0xf, 0x1, 0x1000) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) 05:36:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) 05:36:00 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8447}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0x4004880) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x8028040}, 0xc) socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) 05:36:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe28047787a878a7a, 0x3, 0x1, 0x20, 0x46c, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:00 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x1c9, 0x1, 0x7, 0x908, 0xffffffffffffffff, 0x5a, '\x00', 0x0, r0, 0x4, 0x0, 0x4, 0xa}, 0x48) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf315, 0x24800) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x80, 0x0, 0x2}) 05:36:00 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x1, 0x209b, 0x439, 0x8a1, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x48) socket(0xf, 0x1, 0x1000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) 05:36:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1ff, 0x6, 0x1, 0x80020001}) 05:36:00 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:36:00 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8447}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0x4004880) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x8028040}, 0xc) socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) 05:36:00 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x1, 0x209b, 0x439, 0x8a1, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x48) socket(0xf, 0x1, 0x1000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) 05:36:00 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x40085) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x541b, 0x0) 05:36:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1ff, 0x6, 0x1, 0x80020001}) 05:36:00 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x1c9, 0x1, 0x7, 0x908, 0xffffffffffffffff, 0x5a, '\x00', 0x0, r0, 0x4, 0x0, 0x4, 0xa}, 0x48) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf315, 0x24800) ioctl$BLKRRPART(r1, 0x125f, 0x0) 05:36:00 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:36:00 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000080)={r2, 0x3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 05:36:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x80020001}) 05:36:00 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8447}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0x4004880) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x8028040}, 0xc) socket$netlink(0x10, 0x3, 0xb) 05:36:00 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x1, 0x209b, 0x439, 0x8a1, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x48) socket(0xf, 0x1, 0x1000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) 05:36:00 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x1c9, 0x1, 0x7, 0x908, 0xffffffffffffffff, 0x5a, '\x00', 0x0, r0, 0x4, 0x0, 0x4, 0xa}, 0x48) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 05:36:00 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:36:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80020001}) 05:36:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x3, 0x1, 0x20, 0x46c, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:00 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x1, 0x209b, 0x439, 0x8a1, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) 05:36:00 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8447}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0x4004880) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x8028040}, 0xc) 05:36:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x80020001}) 05:36:01 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x1c9, 0x1, 0x7, 0x908, 0xffffffffffffffff, 0x5a, '\x00', 0x0, r0, 0x4, 0x0, 0x4, 0xa}, 0x48) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 05:36:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020001}) 05:36:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x1, 0x20, 0x46c, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:01 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) 05:36:01 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x1c9, 0x1, 0x7, 0x908, 0xffffffffffffffff, 0x5a, '\x00', 0x0, r0, 0x4, 0x0, 0x4, 0xa}, 0x48) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 05:36:01 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (fail_nth: 1) 05:36:01 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8447}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0x4004880) 05:36:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)) 05:36:01 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x34a00) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) 05:36:01 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) 05:36:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x20, 0x46c, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:01 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf315, 0x24800) ioctl$BLKRRPART(r1, 0x125f, 0x0) [ 1643.220376][T10574] FAULT_INJECTION: forcing a failure. [ 1643.220376][T10574] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:36:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)) 05:36:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x46c, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) [ 1643.285510][T10574] CPU: 0 PID: 10574 Comm: syz-executor.1 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1643.295539][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.305620][T10574] Call Trace: [ 1643.308916][T10574] [ 1643.311871][T10574] dump_stack_lvl+0xcd/0x134 [ 1643.316498][T10574] should_fail.cold+0x5/0xa [ 1643.321044][T10574] prepare_alloc_pages+0x17b/0x570 [ 1643.326195][T10574] ? mark_lock+0xef/0x17b0 [ 1643.330651][T10574] __alloc_pages+0x12f/0x500 05:36:01 executing program 3: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8447}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0x4004880) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x8028040}, 0xc) [ 1643.335277][T10574] ? __alloc_pages_slowpath.constprop.0+0x2080/0x2080 [ 1643.342106][T10574] alloc_pages_vma+0xf9/0x770 [ 1643.346827][T10574] __handle_mm_fault+0x1ca1/0x4150 [ 1643.352044][T10574] ? vm_iomap_memory+0x190/0x190 [ 1643.357043][T10574] handle_mm_fault+0x1c8/0x790 [ 1643.361843][T10574] do_user_addr_fault+0x489/0x11c0 [ 1643.367002][T10574] exc_page_fault+0x9e/0x180 [ 1643.371637][T10574] ? asm_exc_page_fault+0x8/0x30 [ 1643.376609][T10574] asm_exc_page_fault+0x1e/0x30 [ 1643.381484][T10574] RIP: 0033:0x7fcd492f2df1 [ 1643.385920][T10574] Code: 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 44 24 20 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 89 4c 24 28 fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 [ 1643.405542][T10574] RSP: 002b:00007fcd482b4000 EFLAGS: 00010206 [ 1643.411616][T10574] RAX: 0000000000000001 RBX: 00007fcd482b40f0 RCX: 0000000000000000 [ 1643.419586][T10574] RDX: 0000000000000020 RSI: 00007fcd482b4140 RDI: 0000000000000003 [ 1643.427556][T10574] RBP: 0000000000000000 R08: 00007fcd482b4054 R09: 000000000000000c 05:36:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) 05:36:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) [ 1643.435527][T10574] R10: 0000000000000000 R11: 000000002000004f R12: 00007fcd482b40a8 [ 1643.443507][T10574] R13: 00007fcd482b4140 R14: 0000000000000003 R15: 0000000000000000 [ 1643.451505][T10574] 05:36:01 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (fail_nth: 2) 05:36:01 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:01 executing program 3: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8447}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0x4004880) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x8028040}, 0xc) 05:36:01 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x7) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf315, 0x24800) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:01 executing program 4: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) [ 1643.542772][T10574] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 05:36:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:01 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:01 executing program 4: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) 05:36:01 executing program 3: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8447}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0x4004880) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x8028040}, 0xc) 05:36:01 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x7) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf315, 0x24800) ioctl$BLKRRPART(r0, 0x125f, 0x0) [ 1643.693922][T10607] FAULT_INJECTION: forcing a failure. [ 1643.693922][T10607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1643.725812][T10607] CPU: 0 PID: 10607 Comm: syz-executor.1 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1643.735843][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.745926][T10607] Call Trace: [ 1643.749224][T10607] [ 1643.752202][T10607] dump_stack_lvl+0xcd/0x134 [ 1643.756831][T10607] should_fail.cold+0x5/0xa [ 1643.761372][T10607] _copy_from_user+0x2c/0x180 [ 1643.766083][T10607] move_addr_to_kernel.part.0+0x31/0x110 [ 1643.771757][T10607] __sys_sendto+0x166/0x320 [ 1643.776387][T10607] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1643.781796][T10607] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1643.787837][T10607] ? __context_tracking_exit+0xb8/0xe0 05:36:01 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) [ 1643.793336][T10607] ? lock_downgrade+0x6e0/0x6e0 [ 1643.798224][T10607] ? lock_downgrade+0x6e0/0x6e0 [ 1643.803130][T10607] __x64_sys_sendto+0xdd/0x1b0 [ 1643.807931][T10607] ? lockdep_hardirqs_on+0x79/0x100 [ 1643.813178][T10607] ? syscall_enter_from_user_mode+0x21/0x70 [ 1643.819116][T10607] do_syscall_64+0x35/0xb0 [ 1643.823568][T10607] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1643.829487][T10607] RIP: 0033:0x7fcd492f2e1c [ 1643.833920][T10607] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 1643.853569][T10607] RSP: 002b:00007fcd482b4000 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1643.861988][T10607] RAX: ffffffffffffffda RBX: 00007fcd482b40f0 RCX: 00007fcd492f2e1c [ 1643.870051][T10607] RDX: 0000000000000020 RSI: 00007fcd482b4140 RDI: 0000000000000003 [ 1643.878026][T10607] RBP: 0000000000000000 R08: 00007fcd482b4054 R09: 000000000000000c [ 1643.886204][T10607] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fcd482b40a8 05:36:01 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (fail_nth: 3) 05:36:01 executing program 4: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}, {0x0, 0x1, 0x1, 0x5a8}]}, 0x10) 05:36:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x46c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf315, 0x24800) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:01 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:01 executing program 3: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8447}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0x4004880) [ 1643.894290][T10607] R13: 00007fcd482b4140 R14: 0000000000000003 R15: 0000000000000000 [ 1643.902282][T10607] 05:36:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x46c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:01 executing program 2: r0 = syz_open_dev$loop(0x0, 0xf315, 0x24800) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:02 executing program 3: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) 05:36:02 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x46c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) [ 1644.009592][T10632] FAULT_INJECTION: forcing a failure. [ 1644.009592][T10632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.055519][T10632] CPU: 0 PID: 10632 Comm: syz-executor.1 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1644.065560][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1644.075636][T10632] Call Trace: [ 1644.078926][T10632] [ 1644.081865][T10632] dump_stack_lvl+0xcd/0x134 [ 1644.086489][T10632] should_fail.cold+0x5/0xa [ 1644.091025][T10632] _copy_to_user+0x2c/0x150 [ 1644.095563][T10632] simple_read_from_buffer+0xcc/0x160 [ 1644.100965][T10632] proc_fail_nth_read+0x187/0x220 [ 1644.106019][T10632] ? proc_exe_link+0x1d0/0x1d0 [ 1644.110817][T10632] ? security_file_permission+0xab/0xd0 [ 1644.116398][T10632] ? proc_exe_link+0x1d0/0x1d0 [ 1644.121190][T10632] vfs_read+0x1b5/0x600 [ 1644.125383][T10632] ksys_read+0x12d/0x250 [ 1644.129650][T10632] ? vfs_write+0xae0/0xae0 [ 1644.134078][T10632] ? syscall_enter_from_user_mode+0x21/0x70 [ 1644.139995][T10632] do_syscall_64+0x35/0xb0 [ 1644.144420][T10632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1644.150314][T10632] RIP: 0033:0x7fcd492f2c0c [ 1644.154842][T10632] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1644.174645][T10632] RSP: 002b:00007fcd482b5160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1644.183071][T10632] RAX: ffffffffffffffda RBX: 00007fcd49452f60 RCX: 00007fcd492f2c0c [ 1644.191043][T10632] RDX: 000000000000000f RSI: 00007fcd482b51e0 RDI: 0000000000000004 05:36:02 executing program 2: r0 = syz_open_dev$loop(0x0, 0xf315, 0x24800) ioctl$BLKRRPART(r0, 0x125f, 0x0) [ 1644.199015][T10632] RBP: 00007fcd482b51d0 R08: 0000000000000000 R09: 00007fcd482b3f40 [ 1644.206986][T10632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.214953][T10632] R13: 00007ffd4b7b26bf R14: 00007fcd482b5300 R15: 0000000000022000 [ 1644.222934][T10632] 05:36:02 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:36:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 05:36:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x46c, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 05:36:02 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 3: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 2: r0 = syz_open_dev$loop(0x0, 0xf315, 0x24800) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 05:36:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x46c, 0xffffffffffffffff, 0x5}, 0x48) 05:36:02 executing program 0: r0 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x24800) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:02 executing program 3: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8010) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x806}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20048000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000004c0)={0x0, 0x5, &(0x7f00000003c0)=[0x800005, 0x7fff, 0x1, 0x3, 0x9], &(0x7f0000000400)=[0x3097657c], 0x60, 0x1, 0x0, &(0x7f00000007c0)=[0x6], &(0x7f0000000480)}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="00000000dd00058be5d99699e02547f64f150e0791b35e1834940dc06298780c3afa1056dfbfef2927902566249bf6a30625b7541d2f45b9f0797036ca475e5e6632958edac63e2ac79e9877eaa82f4c0e796346888feb11e9075871e1688cd9eb98259252722651b0afecb2453ef53ad9f0234fac4da17a2eb3a025794508708093df02a4e2761c37da7cc36f64200023b1e515aa9b1060ba2ac2220a3c6e0cce3e8475d7f976e3", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x192e0000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004150) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xac0b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0xc894) r7 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8dc7, 0xfa, 0x2, 0xffffffff}, {0x7, 0x5, 0x8, 0xc}, {0x8000, 0x3, 0xff, 0xff}, {0x101, 0x1, 0x4, 0x2}]}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000500)=""/224, &(0x7f0000000440)=0xe0) 05:36:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 05:36:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x46c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:02 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x0, 0x0}, 0x10) 05:36:02 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8010) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x806}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20048000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000004c0)={0x0, 0x5, &(0x7f00000003c0)=[0x800005, 0x7fff, 0x1, 0x3, 0x9], &(0x7f0000000400)=[0x3097657c], 0x60, 0x1, 0x0, &(0x7f00000007c0)=[0x6], &(0x7f0000000480)}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="00000000dd00058be5d99699e02547f64f150e0791b35e1834940dc06298780c3afa1056dfbfef2927902566249bf6a30625b7541d2f45b9f0797036ca475e5e6632958edac63e2ac79e9877eaa82f4c0e796346888feb11e9075871e1688cd9eb98259252722651b0afecb2453ef53ad9f0234fac4da17a2eb3a025794508708093df02a4e2761c37da7cc36f64200023b1e515aa9b1060ba2ac2220a3c6e0cce3e8475d7f976e3", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x192e0000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004150) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xac0b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0xc894) r7 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8dc7, 0xfa, 0x2, 0xffffffff}, {0x7, 0x5, 0x8, 0xc}, {0x8000, 0x3, 0xff, 0xff}, {0x101, 0x1, 0x4, 0x2}]}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000500)=""/224, &(0x7f0000000440)=0xe0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8010) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x806}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20048000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000004c0)={0x0, 0x5, &(0x7f00000003c0)=[0x800005, 0x7fff, 0x1, 0x3, 0x9], &(0x7f0000000400)=[0x3097657c], 0x60, 0x1, 0x0, &(0x7f00000007c0)=[0x6], &(0x7f0000000480)}) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="00000000dd00058be5d99699e02547f64f150e0791b35e1834940dc06298780c3afa1056dfbfef2927902566249bf6a30625b7541d2f45b9f0797036ca475e5e6632958edac63e2ac79e9877eaa82f4c0e796346888feb11e9075871e1688cd9eb98259252722651b0afecb2453ef53ad9f0234fac4da17a2eb3a025794508708093df02a4e2761c37da7cc36f64200023b1e515aa9b1060ba2ac2220a3c6e0cce3e8475d7f976e3", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x192e0000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004150) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xac0b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0xc894) (async) socket(0x2, 0xa, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8dc7, 0xfa, 0x2, 0xffffffff}, {0x7, 0x5, 0x8, 0xc}, {0x8000, 0x3, 0xff, 0xff}, {0x101, 0x1, 0x4, 0x2}]}, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7) (async) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000500)=""/224, &(0x7f0000000440)=0xe0) (async) 05:36:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x46c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:02 executing program 0: r0 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 2: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 05:36:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x0, 0x0}, 0x10) 05:36:02 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x46c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:02 executing program 2: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 05:36:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x0, 0x0}, 0x10) 05:36:02 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:36:02 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 0: r0 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8010) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x806}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20048000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000004c0)={0x0, 0x5, &(0x7f00000003c0)=[0x800005, 0x7fff, 0x1, 0x3, 0x9], &(0x7f0000000400)=[0x3097657c], 0x60, 0x1, 0x0, &(0x7f00000007c0)=[0x6], &(0x7f0000000480)}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="00000000dd00058be5d99699e02547f64f150e0791b35e1834940dc06298780c3afa1056dfbfef2927902566249bf6a30625b7541d2f45b9f0797036ca475e5e6632958edac63e2ac79e9877eaa82f4c0e796346888feb11e9075871e1688cd9eb98259252722651b0afecb2453ef53ad9f0234fac4da17a2eb3a025794508708093df02a4e2761c37da7cc36f64200023b1e515aa9b1060ba2ac2220a3c6e0cce3e8475d7f976e3", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x192e0000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004150) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xac0b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0xc894) r7 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8dc7, 0xfa, 0x2, 0xffffffff}, {0x7, 0x5, 0x8, 0xc}, {0x8000, 0x3, 0xff, 0xff}, {0x101, 0x1, 0x4, 0x2}]}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000500)=""/224, &(0x7f0000000440)=0xe0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8010) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x806}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20048000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000004c0)={0x0, 0x5, &(0x7f00000003c0)=[0x800005, 0x7fff, 0x1, 0x3, 0x9], &(0x7f0000000400)=[0x3097657c], 0x60, 0x1, 0x0, &(0x7f00000007c0)=[0x6], &(0x7f0000000480)}) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="00000000dd00058be5d99699e02547f64f150e0791b35e1834940dc06298780c3afa1056dfbfef2927902566249bf6a30625b7541d2f45b9f0797036ca475e5e6632958edac63e2ac79e9877eaa82f4c0e796346888feb11e9075871e1688cd9eb98259252722651b0afecb2453ef53ad9f0234fac4da17a2eb3a025794508708093df02a4e2761c37da7cc36f64200023b1e515aa9b1060ba2ac2220a3c6e0cce3e8475d7f976e3", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x192e0000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004150) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xac0b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0xc894) (async) socket(0x2, 0xa, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8dc7, 0xfa, 0x2, 0xffffffff}, {0x7, 0x5, 0x8, 0xc}, {0x8000, 0x3, 0xff, 0xff}, {0x101, 0x1, 0x4, 0x2}]}, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7) (async) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000500)=""/224, &(0x7f0000000440)=0xe0) (async) 05:36:02 executing program 2: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 05:36:02 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:36:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}, {0x10, 0x3, 0x0, 0x27}]}, 0x10) 05:36:02 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8010) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x806}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20048000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000004c0)={0x0, 0x5, &(0x7f00000003c0)=[0x800005, 0x7fff, 0x1, 0x3, 0x9], &(0x7f0000000400)=[0x3097657c], 0x60, 0x1, 0x0, &(0x7f00000007c0)=[0x6], &(0x7f0000000480)}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="00000000dd00058be5d99699e02547f64f150e0791b35e1834940dc06298780c3afa1056dfbfef2927902566249bf6a30625b7541d2f45b9f0797036ca475e5e6632958edac63e2ac79e9877eaa82f4c0e796346888feb11e9075871e1688cd9eb98259252722651b0afecb2453ef53ad9f0234fac4da17a2eb3a025794508708093df02a4e2761c37da7cc36f64200023b1e515aa9b1060ba2ac2220a3c6e0cce3e8475d7f976e3", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x192e0000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004150) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xac0b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9a8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0xc894) r7 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8dc7, 0xfa, 0x2, 0xffffffff}, {0x7, 0x5, 0x8, 0xc}, {0x8000, 0x3, 0xff, 0xff}, {0x101, 0x1, 0x4, 0x2}]}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000500)=""/224, &(0x7f0000000440)=0xe0) 05:36:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r1 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) 05:36:02 executing program 0: r0 = socket(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:36:02 executing program 3: r0 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}, {0x8000, 0xff, 0x3, 0x2}]}, 0x10) 05:36:03 executing program 2: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101300, 0x0) 05:36:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r1 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) 05:36:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}]}, 0x10) 05:36:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r1 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) (async) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) (async) 05:36:03 executing program 3: r0 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (fail_nth: 1) 05:36:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) [ 1645.262960][T10768] FAULT_INJECTION: forcing a failure. [ 1645.262960][T10768] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.295687][T10768] CPU: 1 PID: 10768 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1645.305832][T10768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1645.315893][T10768] Call Trace: [ 1645.319174][T10768] [ 1645.322104][T10768] dump_stack_lvl+0xcd/0x134 [ 1645.326716][T10768] should_fail.cold+0x5/0xa [ 1645.331225][T10768] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1645.336946][T10768] should_failslab+0x5/0x10 [ 1645.341449][T10768] __kmalloc+0x72/0x340 [ 1645.345607][T10768] tomoyo_realpath_from_path+0xc3/0x620 [ 1645.351162][T10768] ? tomoyo_profile+0x42/0x50 [ 1645.355859][T10768] tomoyo_path_number_perm+0x1d5/0x590 [ 1645.361324][T10768] ? tomoyo_path_number_perm+0x18d/0x590 [ 1645.366965][T10768] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1645.372772][T10768] ? __lock_acquire+0x162f/0x54d0 [ 1645.377828][T10768] ? find_held_lock+0x2d/0x110 [ 1645.382602][T10768] ? __fget_files+0x28c/0x470 [ 1645.387300][T10768] security_file_ioctl+0x50/0xb0 [ 1645.392254][T10768] __x64_sys_ioctl+0xb3/0x200 [ 1645.396948][T10768] do_syscall_64+0x35/0xb0 [ 1645.401374][T10768] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1645.407283][T10768] RIP: 0033:0x7f246a83c059 [ 1645.411701][T10768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1645.431421][T10768] RSP: 002b:00007f24697b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1645.439935][T10768] RAX: ffffffffffffffda RBX: 00007f246a94ef60 RCX: 00007f246a83c059 [ 1645.447909][T10768] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 1645.455883][T10768] RBP: 00007f24697b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.463856][T10768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.471827][T10768] R13: 00007fffdc96c51f R14: 00007f24697b1300 R15: 0000000000022000 [ 1645.479810][T10768] [ 1645.482874][ C1] vkms_vblank_simulate: vblank timer overrun 05:36:03 executing program 0: r0 = socket(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}]}, 0x10) 05:36:03 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r4, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x5404, 0x4) 05:36:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:36:03 executing program 3: r0 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}]}, 0x10) [ 1645.513644][T10768] ERROR: Out of memory at tomoyo_realpath_from_path. 05:36:03 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r4, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x5404, 0x4) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockname(r4, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x5404, 0x4) (async) 05:36:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x46c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 05:36:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (fail_nth: 2) 05:36:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}]}, 0x10) 05:36:03 executing program 3: r0 = socket(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x46c}, 0x48) [ 1645.738253][T10789] warn_alloc: 4 callbacks suppressed [ 1645.738269][T10789] syz-executor.1: vmalloc error: size 8192, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1645.747237][T10806] FAULT_INJECTION: forcing a failure. [ 1645.747237][T10806] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.785820][T10789] ,cpuset=syz1,mems_allowed=0-1 [ 1645.799042][T10789] CPU: 1 PID: 10789 Comm: syz-executor.1 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1645.809061][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1645.819126][T10789] Call Trace: [ 1645.822412][T10789] [ 1645.825347][T10789] dump_stack_lvl+0xcd/0x134 [ 1645.829959][T10789] warn_alloc.cold+0x9b/0x189 [ 1645.834654][T10789] ? zone_watermark_ok_safe+0x290/0x290 [ 1645.840234][T10789] ? __vmalloc_node_range+0x7e8/0x1130 [ 1645.845702][T10789] __vmalloc_node_range+0xeb5/0x1130 [ 1645.851006][T10789] ? vfree_atomic+0xe0/0xe0 [ 1645.855517][T10789] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1645.861082][T10789] ? kernel_clone+0xe7/0xab0 [ 1645.865686][T10789] copy_process+0x926/0x7310 [ 1645.870299][T10789] ? kernel_clone+0xe7/0xab0 [ 1645.874917][T10789] ? lock_chain_count+0x20/0x20 [ 1645.879788][T10789] ? lock_chain_count+0x20/0x20 [ 1645.884676][T10789] ? __cleanup_sighand+0xb0/0xb0 [ 1645.889630][T10789] ? lock_downgrade+0x6e0/0x6e0 [ 1645.894509][T10789] ? __lock_acquire+0x162f/0x54d0 [ 1645.899575][T10789] ? kernel_clone+0x314/0xab0 [ 1645.904264][T10789] kernel_clone+0xe7/0xab0 [ 1645.908699][T10789] ? create_io_thread+0xf0/0xf0 [ 1645.913563][T10789] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1645.919563][T10789] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1645.925847][T10789] ? find_held_lock+0x2d/0x110 [ 1645.930639][T10789] __do_sys_clone+0xc8/0x110 [ 1645.935245][T10789] ? kernel_clone+0xab0/0xab0 [ 1645.939939][T10789] ? lock_downgrade+0x6e0/0x6e0 [ 1645.944823][T10789] ? syscall_enter_from_user_mode+0x21/0x70 [ 1645.950749][T10789] do_syscall_64+0x35/0xb0 [ 1645.955183][T10789] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1645.961092][T10789] RIP: 0033:0x7fcd49341481 [ 1645.965514][T10789] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1645.985137][T10789] RSP: 002b:00007ffd4b7b2608 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1645.993561][T10789] RAX: ffffffffffffffda RBX: 00007fcd4814a700 RCX: 00007fcd49341481 [ 1646.001536][T10789] RDX: 00007fcd4814a9d0 RSI: 00007fcd4814a2f0 RDI: 00000000003d0f00 [ 1646.009509][T10789] RBP: 00007ffd4b7b2850 R08: 00007fcd4814a700 R09: 00007fcd4814a700 [ 1646.017492][T10789] R10: 00007fcd4814a9d0 R11: 0000000000000206 R12: 00007ffd4b7b26be [ 1646.025479][T10789] R13: 00007ffd4b7b26bf R14: 00007fcd4814a300 R15: 0000000000022000 [ 1646.033488][T10789] [ 1646.047905][T10806] CPU: 0 PID: 10806 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1646.057950][T10806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1646.068033][T10806] Call Trace: [ 1646.071332][T10806] [ 1646.074274][T10806] dump_stack_lvl+0xcd/0x134 [ 1646.075099][T10789] Mem-Info: [ 1646.078893][T10806] should_fail.cold+0x5/0xa [ 1646.078927][T10806] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1646.078959][T10806] should_failslab+0x5/0x10 [ 1646.078981][T10806] __kmalloc+0x72/0x340 [ 1646.079011][T10806] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1646.079047][T10806] tomoyo_encode+0x28/0x50 [ 1646.079077][T10806] tomoyo_realpath_from_path+0x186/0x620 [ 1646.083586][T10789] active_anon:512 inactive_anon:18469 isolated_anon:0 [ 1646.083586][T10789] active_file:4885 inactive_file:7629 isolated_file:0 [ 1646.083586][T10789] unevictable:768 dirty:32 writeback:0 [ 1646.083586][T10789] slab_reclaimable:26735 slab_unreclaimable:99003 [ 1646.083586][T10789] mapped:18195 shmem:1517 pagetables:480 bounce:0 [ 1646.083586][T10789] kernel_misc_reclaimable:0 [ 1646.083586][T10789] free:1425207 free_pcp:9240 free_cma:0 [ 1646.086665][T10806] tomoyo_path_number_perm+0x1d5/0x590 [ 1646.086696][T10806] ? tomoyo_path_number_perm+0x18d/0x590 [ 1646.086731][T10806] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1646.086761][T10806] ? __lock_acquire+0x162f/0x54d0 [ 1646.086829][T10806] ? find_held_lock+0x2d/0x110 05:36:04 executing program 0: r0 = socket(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:04 executing program 3: r0 = socket(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x0, 0x80, 0x2d, 0x8}]}, 0x10) [ 1646.125474][T10789] Node 0 active_anon:2040kB inactive_anon:73872kB active_file:19464kB inactive_file:30516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72780kB dirty:128kB writeback:0kB shmem:4520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 24576kB writeback_tmp:0kB kernel_stack:9392kB pagetables:1916kB all_unreclaimable? no [ 1646.157454][T10806] ? __fget_files+0x28c/0x470 [ 1646.157509][T10806] security_file_ioctl+0x50/0xb0 [ 1646.157551][T10806] __x64_sys_ioctl+0xb3/0x200 [ 1646.157595][T10806] do_syscall_64+0x35/0xb0 [ 1646.157629][T10806] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1646.157655][T10806] RIP: 0033:0x7f246a83c059 [ 1646.157677][T10806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1646.157700][T10806] RSP: 002b:00007f24697b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1646.157733][T10806] RAX: ffffffffffffffda RBX: 00007f246a94ef60 RCX: 00007f246a83c059 [ 1646.157751][T10806] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 1646.157768][T10806] RBP: 00007f24697b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.157785][T10806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.157799][T10806] R13: 00007fffdc96c51f R14: 00007f24697b1300 R15: 0000000000022000 [ 1646.165551][T10789] Node 1 active_anon:8kB inactive_anon:4kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1646.168889][T10806] 05:36:04 executing program 5: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r4, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x5404, 0x4) 05:36:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x0, 0x80, 0x2d, 0x8}]}, 0x10) [ 1646.293438][T10806] ERROR: Out of memory at tomoyo_realpath_from_path. 05:36:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x0, 0x80, 0x2d, 0x8}]}, 0x10) [ 1646.412409][T10789] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1646.530518][T10789] lowmem_reserve[]: 0 2647 2648 2648 2648 [ 1646.536805][T10789] Node 0 DMA32 free:1730336kB boost:0kB min:35688kB low:44608kB high:53528kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:73896kB active_file:19464kB inactive_file:30516kB unevictable:1536kB writepending:128kB present:3129332kB managed:2716784kB mlocked:0kB bounce:0kB free_pcp:39192kB local_pcp:20224kB free_cma:0kB [ 1646.583942][T10789] lowmem_reserve[]: 0 0 0 0 0 [ 1646.590587][T10789] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:656kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1646.617846][T10789] lowmem_reserve[]: 0 0 0 0 0 [ 1646.623258][T10789] Node 1 Normal free:3952768kB boost:0kB min:54208kB low:67760kB high:81312kB reserved_highatomic:0KB active_anon:8kB inactive_anon:4kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1646.653541][T10789] lowmem_reserve[]: 0 0 0 0 0 [ 1646.659282][T10789] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1646.672155][T10789] Node 0 DMA32: 10*4kB (ME) 35*8kB (UME) 40*16kB (UME) 71*32kB (UME) 8*64kB (UME) 9*128kB (UM) 2*256kB (UE) 1*512kB (M) 2*1024kB (ME) 3*2048kB (ME) 419*4096kB (M) = 1730336kB [ 1646.689941][T10789] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1646.701758][T10789] Node 1 Normal: 160*4kB (UME) 28*8kB (UME) 24*16kB (UME) 177*32kB (UME) 80*64kB (UME) 29*128kB (UME) 11*256kB (UME) 6*512kB (UM) 1*1024kB (U) 1*2048kB (E) 959*4096kB (M) = 3952768kB [ 1646.720211][T10789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1646.730931][T10789] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 1646.740329][T10789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1646.749956][T10789] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1646.759641][T10789] 14034 total pagecache pages [ 1646.764388][T10789] 0 pages in swap cache [ 1646.773159][T10789] Swap cache stats: add 0, delete 0, find 0/0 [ 1646.779429][T10789] Free swap = 0kB 05:36:04 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r4, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x5404, 0x4) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockname(r4, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x5404, 0x4) (async) 05:36:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}]}, 0x10) 05:36:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (fail_nth: 3) 05:36:04 executing program 3: r0 = socket(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x0, 0x2d, 0x8}]}, 0x10) 05:36:04 executing program 0: socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) [ 1646.783150][T10789] Total swap = 0kB [ 1646.787027][T10789] 2097051 pages RAM [ 1646.790832][T10789] 0 pages HighMem/MovableOnly [ 1646.795898][T10789] 384446 pages reserved [ 1646.800055][T10789] 0 pages cma reserved [ 1646.839788][T10842] FAULT_INJECTION: forcing a failure. [ 1646.839788][T10842] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:36:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x0, 0x0, 0x8}]}, 0x10) 05:36:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}]}, 0x10) [ 1646.882521][T10842] CPU: 1 PID: 10842 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1646.892608][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1646.902686][T10842] Call Trace: [ 1646.905989][T10842] [ 1646.908934][T10842] dump_stack_lvl+0xcd/0x134 [ 1646.913566][T10842] should_fail.cold+0x5/0xa [ 1646.918110][T10842] _copy_to_user+0x2c/0x150 [ 1646.922653][T10842] simple_read_from_buffer+0xcc/0x160 05:36:04 executing program 0: socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}]}, 0x10) 05:36:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20}]}, 0x10) [ 1646.928068][T10842] proc_fail_nth_read+0x187/0x220 [ 1646.933125][T10842] ? proc_exe_link+0x1d0/0x1d0 [ 1646.937937][T10842] ? security_file_permission+0xab/0xd0 [ 1646.943517][T10842] ? proc_exe_link+0x1d0/0x1d0 [ 1646.948307][T10842] vfs_read+0x1b5/0x600 [ 1646.952491][T10842] ksys_read+0x12d/0x250 [ 1646.956753][T10842] ? vfs_write+0xae0/0xae0 [ 1646.961203][T10842] ? syscall_enter_from_user_mode+0x21/0x70 [ 1646.967146][T10842] do_syscall_64+0x35/0xb0 [ 1646.971601][T10842] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1646.977517][T10842] RIP: 0033:0x7f246a7eec0c [ 1646.981964][T10842] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1647.001597][T10842] RSP: 002b:00007f24697b1160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1647.010020][T10842] RAX: ffffffffffffffda RBX: 00007f246a94ef60 RCX: 00007f246a7eec0c [ 1647.018005][T10842] RDX: 000000000000000f RSI: 00007f24697b11e0 RDI: 0000000000000004 [ 1647.025979][T10842] RBP: 00007f24697b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.033953][T10842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1647.041924][T10842] R13: 00007fffdc96c51f R14: 00007f24697b1300 R15: 0000000000022000 [ 1647.049913][T10842] 05:36:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:05 executing program 1: r0 = socket(0x28, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:36:05 executing program 0: socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:05 executing program 3: socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:05 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}]}, 0x10) 05:36:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}, 0x10) 05:36:05 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 05:36:05 executing program 1: r0 = socket(0x28, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:36:05 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}]}, 0x10) 05:36:05 executing program 3: socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}, 0x10) 05:36:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x7) 05:36:05 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 05:36:05 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}]}, 0x10) 05:36:05 executing program 1: r0 = socket(0x28, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:36:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}, 0x10) 05:36:05 executing program 3: socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:05 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 05:36:05 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 05:36:05 executing program 5: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}]}, 0x10) 05:36:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x700) 05:36:05 executing program 1: ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000240)={0x3}) r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000140)=""/168, &(0x7f0000000200)=0xa8) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/190, &(0x7f0000000000)=0xbe) 05:36:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) (fail_nth: 1) 05:36:05 executing program 5: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}]}, 0x10) 05:36:05 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (fail_nth: 1) 05:36:05 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 05:36:05 executing program 1: ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000240)={0x3}) (async) r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000140)=""/168, &(0x7f0000000200)=0xa8) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/190, &(0x7f0000000000)=0xbe) [ 1647.602907][T10915] FAULT_INJECTION: forcing a failure. [ 1647.602907][T10915] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.651015][T10919] FAULT_INJECTION: forcing a failure. [ 1647.651015][T10919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1647.660326][T10915] CPU: 1 PID: 10915 Comm: syz-executor.0 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1647.674050][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.684120][T10915] Call Trace: [ 1647.687404][T10915] [ 1647.690337][T10915] dump_stack_lvl+0xcd/0x134 [ 1647.694951][T10915] should_fail.cold+0x5/0xa [ 1647.699469][T10915] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1647.705198][T10915] should_failslab+0x5/0x10 [ 1647.709708][T10915] __kmalloc+0x72/0x340 [ 1647.713874][T10915] tomoyo_realpath_from_path+0xc3/0x620 [ 1647.719428][T10915] ? tomoyo_profile+0x42/0x50 [ 1647.724124][T10915] tomoyo_path_number_perm+0x1d5/0x590 [ 1647.729592][T10915] ? tomoyo_path_number_perm+0x18d/0x590 [ 1647.735241][T10915] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1647.741058][T10915] ? __lock_acquire+0x162f/0x54d0 [ 1647.746123][T10915] ? find_held_lock+0x2d/0x110 [ 1647.750906][T10915] ? __fget_files+0x28c/0x470 [ 1647.755614][T10915] security_file_ioctl+0x50/0xb0 [ 1647.760575][T10915] __x64_sys_ioctl+0xb3/0x200 [ 1647.765273][T10915] do_syscall_64+0x35/0xb0 [ 1647.769696][T10915] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1647.775591][T10915] RIP: 0033:0x7fb806618059 [ 1647.780003][T10915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 05:36:05 executing program 5: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x80, 0x2d, 0x8}]}, 0x10) [ 1647.799613][T10915] RSP: 002b:00007fb80558d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1647.808028][T10915] RAX: ffffffffffffffda RBX: 00007fb80672af60 RCX: 00007fb806618059 [ 1647.815995][T10915] RDX: 0000000020000180 RSI: 0000000000008933 RDI: 0000000000000003 [ 1647.823962][T10915] RBP: 00007fb80558d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.831935][T10915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1647.839912][T10915] R13: 00007ffe4dab5e5f R14: 00007fb80558d300 R15: 0000000000022000 [ 1647.847986][T10915] [ 1647.863902][T10919] CPU: 1 PID: 10919 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1647.873937][T10919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.884015][T10919] Call Trace: [ 1647.887302][T10919] [ 1647.890244][T10919] dump_stack_lvl+0xcd/0x134 [ 1647.894869][T10919] should_fail.cold+0x5/0xa [ 1647.899407][T10919] _copy_from_user+0x2c/0x180 [ 1647.904115][T10919] sock_setsockopt+0x28e/0x2d70 05:36:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x7000000) [ 1647.905465][T10915] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1647.908997][T10919] ? sock_set_timestamping+0x7a0/0x7a0 [ 1647.909043][T10919] ? aa_sk_perm+0x30f/0xaa0 [ 1647.909071][T10919] ? __fget_files+0x28c/0x470 [ 1647.930345][T10919] ? aa_af_perm+0x230/0x230 [ 1647.934880][T10919] ? __sys_setsockopt+0x51b/0x6a0 [ 1647.939948][T10919] __sys_setsockopt+0x55e/0x6a0 [ 1647.944839][T10919] ? __ia32_sys_recv+0x100/0x100 [ 1647.949815][T10919] ? lock_downgrade+0x6e0/0x6e0 [ 1647.954697][T10919] ? lock_downgrade+0x6e0/0x6e0 [ 1647.959598][T10919] __x64_sys_setsockopt+0xba/0x150 [ 1647.964745][T10919] ? syscall_enter_from_user_mode+0x21/0x70 [ 1647.970677][T10919] do_syscall_64+0x35/0xb0 [ 1647.975110][T10919] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1647.981014][T10919] RIP: 0033:0x7fe6c8d37059 [ 1647.985431][T10919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1648.005040][T10919] RSP: 002b:00007fe6c7cac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 05:36:06 executing program 1: ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000240)={0x3}) r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000140)=""/168, &(0x7f0000000200)=0xa8) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/190, &(0x7f0000000000)=0xbe) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000240)={0x3}) (async) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000140)=""/168, &(0x7f0000000200)=0xa8) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/190, &(0x7f0000000000)=0xbe) (async) 05:36:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x700000000000000) 05:36:06 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) [ 1648.013452][T10919] RAX: ffffffffffffffda RBX: 00007fe6c8e49f60 RCX: 00007fe6c8d37059 [ 1648.022204][T10919] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1648.030173][T10919] RBP: 00007fe6c7cac1d0 R08: 0000000000000010 R09: 0000000000000000 [ 1648.038142][T10919] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 1648.046127][T10919] R13: 00007fff19ce9f2f R14: 00007fe6c7cac300 R15: 0000000000022000 [ 1648.054114][T10919] 05:36:06 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (fail_nth: 2) 05:36:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) [ 1648.147190][T10944] FAULT_INJECTION: forcing a failure. [ 1648.147190][T10944] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.191074][T10944] CPU: 0 PID: 10944 Comm: syz-executor.0 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1648.201102][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.211173][T10944] Call Trace: [ 1648.214538][T10944] [ 1648.217469][T10944] dump_stack_lvl+0xcd/0x134 [ 1648.222078][T10944] should_fail.cold+0x5/0xa [ 1648.226593][T10944] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1648.231969][T10944] should_failslab+0x5/0x10 [ 1648.236485][T10944] __kmalloc+0x72/0x340 [ 1648.240649][T10944] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1648.245859][T10944] tomoyo_encode+0x28/0x50 [ 1648.250277][T10944] tomoyo_realpath_from_path+0x186/0x620 [ 1648.255916][T10944] ? tomoyo_profile+0x42/0x50 [ 1648.260613][T10944] tomoyo_path_number_perm+0x1d5/0x590 [ 1648.266097][T10944] ? tomoyo_path_number_perm+0x18d/0x590 [ 1648.271738][T10944] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1648.277553][T10944] ? __lock_acquire+0x162f/0x54d0 [ 1648.282623][T10944] ? find_held_lock+0x2d/0x110 [ 1648.287396][T10944] ? __fget_files+0x28c/0x470 [ 1648.292097][T10944] security_file_ioctl+0x50/0xb0 [ 1648.297051][T10944] __x64_sys_ioctl+0xb3/0x200 [ 1648.301748][T10944] do_syscall_64+0x35/0xb0 [ 1648.306174][T10944] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1648.312076][T10944] RIP: 0033:0x7fb806618059 [ 1648.316491][T10944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1648.336112][T10944] RSP: 002b:00007fb80558d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1648.344525][T10944] RAX: ffffffffffffffda RBX: 00007fb80672af60 RCX: 00007fb806618059 [ 1648.352490][T10944] RDX: 0000000020000180 RSI: 0000000000008933 RDI: 0000000000000003 [ 1648.360457][T10944] RBP: 00007fb80558d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.368425][T10944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1648.376392][T10944] R13: 00007ffe4dab5e5f R14: 00007fb80558d300 R15: 0000000000022000 [ 1648.384374][T10944] 05:36:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) (fail_nth: 2) 05:36:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:06 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (fail_nth: 1) 05:36:06 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x8001, 0x1c}, 0xc) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xff00, 0x2) 05:36:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 05:36:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) [ 1648.404491][T10944] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1648.441889][T10951] FAULT_INJECTION: forcing a failure. [ 1648.441889][T10951] name failslab, interval 1, probability 0, space 0, times 0 05:36:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 05:36:06 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x8001, 0x1c}, 0xc) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xff00, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x8001, 0x1c}, 0xc) (async) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xff00, 0x2) (async) [ 1648.476108][T10955] FAULT_INJECTION: forcing a failure. [ 1648.476108][T10955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1648.493137][T10951] CPU: 1 PID: 10951 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1648.503164][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.513251][T10951] Call Trace: [ 1648.516544][T10951] [ 1648.519486][T10951] dump_stack_lvl+0xcd/0x134 05:36:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) [ 1648.524119][T10951] should_fail.cold+0x5/0xa [ 1648.528656][T10951] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1648.534397][T10951] should_failslab+0x5/0x10 [ 1648.538920][T10951] __kmalloc+0x72/0x340 [ 1648.543101][T10951] tomoyo_realpath_from_path+0xc3/0x620 [ 1648.548668][T10951] ? tomoyo_profile+0x42/0x50 [ 1648.553375][T10951] tomoyo_path_number_perm+0x1d5/0x590 [ 1648.558856][T10951] ? tomoyo_path_number_perm+0x18d/0x590 [ 1648.564520][T10951] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1648.570354][T10951] ? __lock_acquire+0x162f/0x54d0 [ 1648.575437][T10951] ? find_held_lock+0x2d/0x110 [ 1648.580248][T10951] ? __fget_files+0x28c/0x470 [ 1648.584957][T10951] security_file_ioctl+0x50/0xb0 [ 1648.589924][T10951] __x64_sys_ioctl+0xb3/0x200 [ 1648.594638][T10951] do_syscall_64+0x35/0xb0 [ 1648.599083][T10951] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1648.604996][T10951] RIP: 0033:0x7f94ad9f8059 [ 1648.609427][T10951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1648.629072][T10951] RSP: 002b:00007f94ac96d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1648.637505][T10951] RAX: ffffffffffffffda RBX: 00007f94adb0af60 RCX: 00007f94ad9f8059 [ 1648.645487][T10951] RDX: 0000000020000180 RSI: 0000000000008933 RDI: 0000000000000003 [ 1648.653467][T10951] RBP: 00007f94ac96d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.661453][T10951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1648.669430][T10951] R13: 00007ffef062a5ff R14: 00007f94ac96d300 R15: 0000000000022000 [ 1648.677432][T10951] [ 1648.680455][T10955] CPU: 0 PID: 10955 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1648.690453][T10955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.700528][T10955] Call Trace: [ 1648.703826][T10955] [ 1648.706766][T10955] dump_stack_lvl+0xcd/0x134 [ 1648.711395][T10955] should_fail.cold+0x5/0xa [ 1648.715938][T10955] _copy_from_user+0x2c/0x180 [ 1648.720650][T10955] copy_bpf_fprog_from_user+0x34a/0x410 [ 1648.726329][T10955] ? bpf_skb_change_tail+0xc00/0xc00 [ 1648.731644][T10955] ? mark_held_locks+0x9f/0xe0 [ 1648.736442][T10955] ? __local_bh_enable_ip+0xa0/0x120 [ 1648.741775][T10955] sock_setsockopt+0x9a4/0x2d70 [ 1648.743439][T10951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1648.746653][T10955] ? sock_set_timestamping+0x7a0/0x7a0 [ 1648.746728][T10955] ? aa_sk_perm+0x30f/0xaa0 [ 1648.746755][T10955] ? __fget_files+0x28c/0x470 [ 1648.746796][T10955] ? aa_af_perm+0x230/0x230 [ 1648.746832][T10955] ? __sys_setsockopt+0x51b/0x6a0 [ 1648.777571][T10955] __sys_setsockopt+0x55e/0x6a0 [ 1648.782446][T10955] ? __ia32_sys_recv+0x100/0x100 [ 1648.787401][T10955] ? lock_downgrade+0x6e0/0x6e0 [ 1648.792268][T10955] ? lock_downgrade+0x6e0/0x6e0 [ 1648.797139][T10955] __x64_sys_setsockopt+0xba/0x150 [ 1648.802267][T10955] ? syscall_enter_from_user_mode+0x21/0x70 [ 1648.808178][T10955] do_syscall_64+0x35/0xb0 [ 1648.812646][T10955] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1648.818561][T10955] RIP: 0033:0x7fe6c8d37059 [ 1648.822988][T10955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1648.842600][T10955] RSP: 002b:00007fe6c7cac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1648.851016][T10955] RAX: ffffffffffffffda RBX: 00007fe6c8e49f60 RCX: 00007fe6c8d37059 [ 1648.858984][T10955] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1648.866950][T10955] RBP: 00007fe6c7cac1d0 R08: 0000000000000010 R09: 0000000000000000 05:36:06 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (fail_nth: 3) 05:36:06 executing program 2: ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 05:36:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x0, 0x0}, 0x10) [ 1648.874916][T10955] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 1648.882896][T10955] R13: 00007fff19ce9f2f R14: 00007fe6c7cac300 R15: 0000000000022000 [ 1648.890892][T10955] [ 1648.927261][T10979] FAULT_INJECTION: forcing a failure. [ 1648.927261][T10979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1648.940466][T10979] CPU: 0 PID: 10979 Comm: syz-executor.0 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1648.950475][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.960551][T10979] Call Trace: [ 1648.963842][T10979] [ 1648.966785][T10979] dump_stack_lvl+0xcd/0x134 [ 1648.971417][T10979] should_fail.cold+0x5/0xa 05:36:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) (fail_nth: 3) [ 1648.975958][T10979] _copy_from_user+0x2c/0x180 [ 1648.980664][T10979] get_user_ifreq+0xef/0x250 [ 1648.985287][T10979] sock_do_ioctl+0x12a/0x230 [ 1648.989908][T10979] ? put_user_ifreq+0x140/0x140 [ 1648.994792][T10979] ? vfs_fileattr_set+0xbe0/0xbe0 [ 1648.999865][T10979] sock_ioctl+0x2f1/0x640 [ 1649.004248][T10979] ? br_ioctl_call+0xa0/0xa0 [ 1649.008874][T10979] ? __fget_files+0x28c/0x470 [ 1649.013595][T10979] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.019879][T10979] ? br_ioctl_call+0xa0/0xa0 [ 1649.022880][T10984] FAULT_INJECTION: forcing a failure. [ 1649.022880][T10984] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.024497][T10979] __x64_sys_ioctl+0x193/0x200 [ 1649.024551][T10979] do_syscall_64+0x35/0xb0 [ 1649.024586][T10979] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1649.052214][T10979] RIP: 0033:0x7fb806618059 [ 1649.056637][T10979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1649.076263][T10979] RSP: 002b:00007fb80558d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1649.084700][T10979] RAX: ffffffffffffffda RBX: 00007fb80672af60 RCX: 00007fb806618059 [ 1649.092690][T10979] RDX: 0000000020000180 RSI: 0000000000008933 RDI: 0000000000000003 [ 1649.100677][T10979] RBP: 00007fb80558d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.108751][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.116735][T10979] R13: 00007ffe4dab5e5f R14: 00007fb80558d300 R15: 0000000000022000 [ 1649.124737][T10979] [ 1649.127759][T10984] CPU: 1 PID: 10984 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1649.137756][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1649.147822][T10984] Call Trace: [ 1649.151103][T10984] [ 1649.154032][T10984] dump_stack_lvl+0xcd/0x134 [ 1649.158636][T10984] should_fail.cold+0x5/0xa [ 1649.163142][T10984] ? __get_vm_area_node.constprop.0+0xd3/0x3e0 [ 1649.169299][T10984] should_failslab+0x5/0x10 [ 1649.173802][T10984] kmem_cache_alloc_node_trace+0x59/0x310 [ 1649.179522][T10984] ? mark_lock+0xef/0x17b0 [ 1649.183953][T10984] __get_vm_area_node.constprop.0+0xd3/0x3e0 [ 1649.189943][T10984] __vmalloc_node_range+0x154/0x1130 [ 1649.195233][T10984] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1649.200851][T10984] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1649.206413][T10984] ? __might_fault+0xd1/0x170 [ 1649.211098][T10984] ? lock_downgrade+0x6e0/0x6e0 [ 1649.215955][T10984] ? vfree_atomic+0xe0/0xe0 [ 1649.220465][T10984] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1649.226021][T10984] __vmalloc+0x69/0x80 [ 1649.230092][T10984] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1649.235647][T10984] bpf_prog_alloc_no_stats+0x38/0x350 [ 1649.241033][T10984] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.247289][T10984] bpf_prog_alloc+0x28/0x1a0 [ 1649.251892][T10984] ? mark_held_locks+0x9f/0xe0 [ 1649.256670][T10984] __get_filter+0x115/0x4e0 [ 1649.261181][T10984] sk_attach_filter+0x1c/0x170 [ 1649.265950][T10984] sock_setsockopt+0x2104/0x2d70 [ 1649.270896][T10984] ? sock_set_timestamping+0x7a0/0x7a0 [ 1649.276375][T10984] ? aa_sk_perm+0x30f/0xaa0 [ 1649.280878][T10984] ? __fget_files+0x28c/0x470 [ 1649.285578][T10984] ? __sys_setsockopt+0x51b/0x6a0 [ 1649.290613][T10984] __sys_setsockopt+0x55e/0x6a0 [ 1649.295473][T10984] ? __ia32_sys_recv+0x100/0x100 [ 1649.300419][T10984] ? lock_downgrade+0x6e0/0x6e0 [ 1649.305274][T10984] ? lock_downgrade+0x6e0/0x6e0 [ 1649.310152][T10984] __x64_sys_setsockopt+0xba/0x150 [ 1649.315279][T10984] ? syscall_enter_from_user_mode+0x21/0x70 [ 1649.321188][T10984] do_syscall_64+0x35/0xb0 [ 1649.325609][T10984] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1649.331540][T10984] RIP: 0033:0x7fe6c8d37059 [ 1649.335958][T10984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1649.355567][T10984] RSP: 002b:00007fe6c7cac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1649.363980][T10984] RAX: ffffffffffffffda RBX: 00007fe6c8e49f60 RCX: 00007fe6c8d37059 05:36:07 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x8001, 0x1c}, 0xc) (async) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xff00, 0x2) 05:36:07 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (fail_nth: 2) 05:36:07 executing program 2: ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 05:36:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x0, 0x0}, 0x10) 05:36:07 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (fail_nth: 4) [ 1649.371949][T10984] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1649.379917][T10984] RBP: 00007fe6c7cac1d0 R08: 0000000000000010 R09: 0000000000000000 [ 1649.387883][T10984] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 1649.395847][T10984] R13: 00007fff19ce9f2f R14: 00007fe6c7cac300 R15: 0000000000022000 [ 1649.403831][T10984] 05:36:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x0, 0x0}, 0x10) 05:36:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) (fail_nth: 4) [ 1649.457076][T10987] FAULT_INJECTION: forcing a failure. [ 1649.457076][T10987] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.485631][T10987] CPU: 0 PID: 10987 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1649.495839][T10987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:36:07 executing program 2: ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) [ 1649.505915][T10987] Call Trace: [ 1649.509211][T10987] [ 1649.512160][T10987] dump_stack_lvl+0xcd/0x134 [ 1649.516788][T10987] should_fail.cold+0x5/0xa [ 1649.521345][T10987] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1649.526837][T10987] should_failslab+0x5/0x10 [ 1649.531367][T10987] __kmalloc+0x72/0x340 [ 1649.535553][T10987] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1649.540780][T10987] tomoyo_encode+0x28/0x50 [ 1649.545252][T10987] tomoyo_realpath_from_path+0x186/0x620 [ 1649.550909][T10987] ? tomoyo_profile+0x42/0x50 [ 1649.555632][T10987] tomoyo_path_number_perm+0x1d5/0x590 [ 1649.561115][T10987] ? tomoyo_path_number_perm+0x18d/0x590 [ 1649.566778][T10987] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1649.572615][T10987] ? __lock_acquire+0x162f/0x54d0 [ 1649.577715][T10987] ? find_held_lock+0x2d/0x110 [ 1649.582521][T10987] ? __fget_files+0x28c/0x470 [ 1649.587246][T10987] security_file_ioctl+0x50/0xb0 [ 1649.588054][T10999] FAULT_INJECTION: forcing a failure. [ 1649.588054][T10999] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:36:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000080)={0x4, 0x2, 0x6f, 0x3, &(0x7f0000000000)=[{0x6, 0x7, 0x1, 0x3}, {0xff, 0x8, 0x9, 0x81}, {0x8, 0x0, 0x1ff, 0x5}]}) r1 = socket(0x1, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x1, 0x2a}, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) [ 1649.592217][T10987] __x64_sys_ioctl+0xb3/0x200 [ 1649.592269][T10987] do_syscall_64+0x35/0xb0 [ 1649.592304][T10987] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1649.592331][T10987] RIP: 0033:0x7f94ad9f8059 [ 1649.592350][T10987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1649.592384][T10987] RSP: 002b:00007f94ac96d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1649.592412][T10987] RAX: ffffffffffffffda RBX: 00007f94adb0af60 RCX: 00007f94ad9f8059 [ 1649.592430][T10987] RDX: 0000000020000180 RSI: 0000000000008933 RDI: 0000000000000003 [ 1649.592448][T10987] RBP: 00007f94ac96d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.592464][T10987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.592480][T10987] R13: 00007ffef062a5ff R14: 00007f94ac96d300 R15: 0000000000022000 [ 1649.592517][T10987] [ 1649.649769][T11004] FAULT_INJECTION: forcing a failure. [ 1649.649769][T11004] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.661466][T10999] CPU: 1 PID: 10999 Comm: syz-executor.0 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1649.719067][T10999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1649.729122][T10999] Call Trace: [ 1649.732396][T10999] [ 1649.735323][T10999] dump_stack_lvl+0xcd/0x134 [ 1649.739933][T10999] should_fail.cold+0x5/0xa [ 1649.744447][T10999] _copy_to_user+0x2c/0x150 [ 1649.748960][T10999] put_user_ifreq+0xf4/0x140 [ 1649.753558][T10999] sock_do_ioctl+0x1eb/0x230 [ 1649.758157][T10999] ? put_user_ifreq+0x140/0x140 [ 1649.763028][T10999] sock_ioctl+0x2f1/0x640 [ 1649.767360][T10999] ? br_ioctl_call+0xa0/0xa0 [ 1649.771961][T10999] ? __fget_files+0x28c/0x470 [ 1649.776830][T10999] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.783089][T10999] ? br_ioctl_call+0xa0/0xa0 [ 1649.787690][T10999] __x64_sys_ioctl+0x193/0x200 [ 1649.792468][T10999] do_syscall_64+0x35/0xb0 [ 1649.796896][T10999] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1649.802792][T10999] RIP: 0033:0x7fb806618059 [ 1649.807206][T10999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1649.826815][T10999] RSP: 002b:00007fb80558d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1649.835324][T10999] RAX: ffffffffffffffda RBX: 00007fb80672af60 RCX: 00007fb806618059 [ 1649.843298][T10999] RDX: 0000000020000180 RSI: 0000000000008933 RDI: 0000000000000003 [ 1649.851267][T10999] RBP: 00007fb80558d1d0 R08: 0000000000000000 R09: 0000000000000000 05:36:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}]}, 0x10) [ 1649.859232][T10999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.867202][T10999] R13: 00007ffe4dab5e5f R14: 00007fb80558d300 R15: 0000000000022000 [ 1649.875183][T10999] [ 1649.901728][T10987] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1649.905098][T11004] CPU: 0 PID: 11004 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1649.918422][T11004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1649.928499][T11004] Call Trace: [ 1649.931796][T11004] [ 1649.934739][T11004] dump_stack_lvl+0xcd/0x134 [ 1649.939374][T11004] should_fail.cold+0x5/0xa [ 1649.943920][T11004] should_failslab+0x5/0x10 05:36:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') r2 = syz_open_dev$sg(&(0x7f0000000040), 0xfffffffffffffffe, 0x8000) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$I2C_RETRIES(r1, 0x701, 0x33) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') (async) r2 = syz_open_dev$sg(&(0x7f0000000040), 0xfffffffffffffffe, 0x8000) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$I2C_RETRIES(r1, 0x701, 0x33) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) [ 1649.948449][T11004] kmem_cache_alloc_node+0x65/0x3f0 [ 1649.953677][T11004] ? alloc_vmap_area+0x164/0x1dc0 [ 1649.958746][T11004] alloc_vmap_area+0x164/0x1dc0 [ 1649.963641][T11004] ? free_vmap_area+0x1ac0/0x1ac0 [ 1649.968700][T11004] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1649.974279][T11004] ? trace_kmalloc_node+0x32/0x100 [ 1649.979446][T11004] __get_vm_area_node.constprop.0+0x128/0x3e0 [ 1649.985552][T11004] __vmalloc_node_range+0x154/0x1130 [ 1649.990869][T11004] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1649.996455][T11004] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1650.002066][T11004] ? __might_fault+0xd1/0x170 [ 1650.006781][T11004] ? lock_downgrade+0x6e0/0x6e0 [ 1650.011672][T11004] ? vfree_atomic+0xe0/0xe0 [ 1650.016213][T11004] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1650.021908][T11004] __vmalloc+0x69/0x80 [ 1650.026022][T11004] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1650.031607][T11004] bpf_prog_alloc_no_stats+0x38/0x350 [ 1650.037021][T11004] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1650.043324][T11004] bpf_prog_alloc+0x28/0x1a0 05:36:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') r2 = syz_open_dev$sg(&(0x7f0000000040), 0xfffffffffffffffe, 0x8000) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$I2C_RETRIES(r1, 0x701, 0x33) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) [ 1650.047948][T11004] ? mark_held_locks+0x9f/0xe0 [ 1650.052744][T11004] __get_filter+0x115/0x4e0 [ 1650.057280][T11004] sk_attach_filter+0x1c/0x170 [ 1650.062082][T11004] sock_setsockopt+0x2104/0x2d70 [ 1650.067053][T11004] ? sock_set_timestamping+0x7a0/0x7a0 [ 1650.072553][T11004] ? aa_sk_perm+0x30f/0xaa0 [ 1650.077091][T11004] ? __fget_files+0x28c/0x470 [ 1650.081829][T11004] ? __sys_setsockopt+0x51b/0x6a0 [ 1650.086904][T11004] __sys_setsockopt+0x55e/0x6a0 [ 1650.091800][T11004] ? __ia32_sys_recv+0x100/0x100 [ 1650.096794][T11004] ? lock_downgrade+0x6e0/0x6e0 [ 1650.101682][T11004] ? lock_downgrade+0x6e0/0x6e0 [ 1650.106585][T11004] __x64_sys_setsockopt+0xba/0x150 [ 1650.111738][T11004] ? syscall_enter_from_user_mode+0x21/0x70 [ 1650.117689][T11004] do_syscall_64+0x35/0xb0 [ 1650.122235][T11004] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1650.128164][T11004] RIP: 0033:0x7fe6c8d37059 [ 1650.132583][T11004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1650.152404][T11004] RSP: 002b:00007fe6c7cac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1650.160836][T11004] RAX: ffffffffffffffda RBX: 00007fe6c8e49f60 RCX: 00007fe6c8d37059 [ 1650.168807][T11004] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1650.176781][T11004] RBP: 00007fe6c7cac1d0 R08: 0000000000000010 R09: 0000000000000000 [ 1650.184748][T11004] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 1650.192716][T11004] R13: 00007fff19ce9f2f R14: 00007fe6c7cac300 R15: 0000000000022000 [ 1650.200702][T11004] 05:36:08 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (fail_nth: 3) 05:36:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000080)={0x4, 0x2, 0x6f, 0x3, &(0x7f0000000000)=[{0x6, 0x7, 0x1, 0x3}, {0xff, 0x8, 0x9, 0x81}, {0x8, 0x0, 0x1ff, 0x5}]}) r1 = socket(0x1, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x1, 0x2a}, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000080)={0x4, 0x2, 0x6f, 0x3, &(0x7f0000000000)=[{0x6, 0x7, 0x1, 0x3}, {0xff, 0x8, 0x9, 0x81}, {0x8, 0x0, 0x1ff, 0x5}]}) (async) socket(0x1, 0x0, 0x0) (async) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x1, 0x2a}, 0x2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) (async) 05:36:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) (fail_nth: 5) 05:36:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x48000) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0x8, 0x9, 0x40, 0x3}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}]}, 0x10) 05:36:08 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (fail_nth: 5) 05:36:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x48000) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0x8, 0x9, 0x40, 0x3}) (async, rerun: 64) ioctl$BLKRRPART(r0, 0x125f, 0x0) (rerun: 64) [ 1650.306913][T11023] FAULT_INJECTION: forcing a failure. [ 1650.306913][T11023] name failslab, interval 1, probability 0, space 0, times 0 05:36:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000080)={0x4, 0x2, 0x6f, 0x3, &(0x7f0000000000)=[{0x6, 0x7, 0x1, 0x3}, {0xff, 0x8, 0x9, 0x81}, {0x8, 0x0, 0x1ff, 0x5}]}) r1 = socket(0x1, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x1, 0x2a}, 0x2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) [ 1650.350434][T11033] FAULT_INJECTION: forcing a failure. [ 1650.350434][T11033] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.363922][T11037] FAULT_INJECTION: forcing a failure. [ 1650.363922][T11037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.368527][T11023] CPU: 1 PID: 11023 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1650.386952][T11023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.397022][T11023] Call Trace: [ 1650.400311][T11023] [ 1650.403254][T11023] dump_stack_lvl+0xcd/0x134 [ 1650.407883][T11023] should_fail.cold+0x5/0xa [ 1650.412422][T11023] should_failslab+0x5/0x10 [ 1650.416950][T11023] kmem_cache_alloc_node+0x65/0x3f0 [ 1650.422168][T11023] ? alloc_vmap_area+0xb04/0x1dc0 [ 1650.427220][T11023] alloc_vmap_area+0xb04/0x1dc0 [ 1650.432092][T11023] ? kmem_cache_alloc_node_trace+0x46/0x310 [ 1650.438036][T11023] ? free_vmap_area+0x1ac0/0x1ac0 [ 1650.443075][T11023] ? rcu_read_lock_sched_held+0x3a/0x70 05:36:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}]}, 0x10) 05:36:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x0, 0x80, 0x2d, 0x8}]}, 0x10) [ 1650.448647][T11023] ? trace_kmalloc_node+0x32/0x100 [ 1650.453806][T11023] __get_vm_area_node.constprop.0+0x128/0x3e0 [ 1650.459907][T11023] __vmalloc_node_range+0x154/0x1130 [ 1650.465215][T11023] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1650.470787][T11023] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1650.476366][T11023] ? __might_fault+0xd1/0x170 [ 1650.481074][T11023] ? lock_downgrade+0x6e0/0x6e0 [ 1650.485950][T11023] ? vfree_atomic+0xe0/0xe0 [ 1650.490475][T11023] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1650.496053][T11023] __vmalloc+0x69/0x80 [ 1650.500155][T11023] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1650.505736][T11023] bpf_prog_alloc_no_stats+0x38/0x350 [ 1650.511147][T11023] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1650.517427][T11023] bpf_prog_alloc+0x28/0x1a0 [ 1650.522045][T11023] ? mark_held_locks+0x9f/0xe0 [ 1650.526842][T11023] __get_filter+0x115/0x4e0 [ 1650.531371][T11023] sk_attach_filter+0x1c/0x170 [ 1650.536156][T11023] sock_setsockopt+0x2104/0x2d70 [ 1650.541114][T11023] ? sock_set_timestamping+0x7a0/0x7a0 [ 1650.546611][T11023] ? aa_sk_perm+0x30f/0xaa0 05:36:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x0, 0x80, 0x2d, 0x8}]}, 0x10) [ 1650.551134][T11023] ? __fget_files+0x28c/0x470 [ 1650.555851][T11023] ? __sys_setsockopt+0x51b/0x6a0 [ 1650.560909][T11023] __sys_setsockopt+0x55e/0x6a0 [ 1650.565796][T11023] ? __ia32_sys_recv+0x100/0x100 [ 1650.570760][T11023] ? lock_downgrade+0x6e0/0x6e0 [ 1650.575641][T11023] ? lock_downgrade+0x6e0/0x6e0 [ 1650.580537][T11023] __x64_sys_setsockopt+0xba/0x150 [ 1650.585680][T11023] ? syscall_enter_from_user_mode+0x21/0x70 [ 1650.591617][T11023] do_syscall_64+0x35/0xb0 05:36:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x0, 0x80, 0x2d, 0x8}]}, 0x10) [ 1650.596057][T11023] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1650.601960][T11023] RIP: 0033:0x7fe6c8d37059 [ 1650.606466][T11023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1650.626091][T11023] RSP: 002b:00007fe6c7cac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1650.634530][T11023] RAX: ffffffffffffffda RBX: 00007fe6c8e49f60 RCX: 00007fe6c8d37059 [ 1650.642513][T11023] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1650.650501][T11023] RBP: 00007fe6c7cac1d0 R08: 0000000000000010 R09: 0000000000000000 [ 1650.658485][T11023] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 1650.666473][T11023] R13: 00007fff19ce9f2f R14: 00007fe6c7cac300 R15: 0000000000022000 [ 1650.674482][T11023] [ 1650.685818][T11037] CPU: 0 PID: 11037 Comm: syz-executor.0 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1650.695832][T11037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.705902][T11037] Call Trace: [ 1650.709186][T11037] [ 1650.712131][T11037] dump_stack_lvl+0xcd/0x134 [ 1650.716758][T11037] should_fail.cold+0x5/0xa [ 1650.721294][T11037] _copy_to_user+0x2c/0x150 [ 1650.725830][T11037] simple_read_from_buffer+0xcc/0x160 [ 1650.731233][T11037] proc_fail_nth_read+0x187/0x220 [ 1650.736288][T11037] ? proc_exe_link+0x1d0/0x1d0 [ 1650.741072][T11037] ? security_file_permission+0xab/0xd0 [ 1650.746651][T11037] ? proc_exe_link+0x1d0/0x1d0 [ 1650.751436][T11037] vfs_read+0x1b5/0x600 [ 1650.755618][T11037] ksys_read+0x12d/0x250 [ 1650.759879][T11037] ? vfs_write+0xae0/0xae0 [ 1650.764305][T11037] ? syscall_enter_from_user_mode+0x21/0x70 [ 1650.770238][T11037] do_syscall_64+0x35/0xb0 [ 1650.774681][T11037] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1650.780587][T11037] RIP: 0033:0x7fb8065cac0c [ 1650.785008][T11037] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1650.804909][T11037] RSP: 002b:00007fb80558d160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1650.813335][T11037] RAX: ffffffffffffffda RBX: 00007fb80672af60 RCX: 00007fb8065cac0c [ 1650.821323][T11037] RDX: 000000000000000f RSI: 00007fb80558d1e0 RDI: 0000000000000004 [ 1650.829323][T11037] RBP: 00007fb80558d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.837295][T11037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.845266][T11037] R13: 00007ffe4dab5e5f R14: 00007fb80558d300 R15: 0000000000022000 [ 1650.853257][T11037] [ 1650.866368][T11033] CPU: 0 PID: 11033 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1650.876379][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.886455][T11033] Call Trace: [ 1650.889742][T11033] [ 1650.892681][T11033] dump_stack_lvl+0xcd/0x134 [ 1650.897304][T11033] should_fail.cold+0x5/0xa [ 1650.901838][T11033] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1650.907236][T11033] should_failslab+0x5/0x10 [ 1650.911769][T11033] __kmalloc+0x72/0x340 [ 1650.915949][T11033] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1650.921177][T11033] tomoyo_encode+0x28/0x50 [ 1650.925624][T11033] tomoyo_realpath_from_path+0x186/0x620 [ 1650.931304][T11033] ? tomoyo_profile+0x42/0x50 [ 1650.936000][T11033] tomoyo_path_number_perm+0x1d5/0x590 [ 1650.941480][T11033] ? tomoyo_path_number_perm+0x18d/0x590 [ 1650.947119][T11033] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1650.952941][T11033] ? __lock_acquire+0x162f/0x54d0 [ 1650.958001][T11033] ? find_held_lock+0x2d/0x110 [ 1650.962811][T11033] ? __fget_files+0x28c/0x470 [ 1650.967526][T11033] security_file_ioctl+0x50/0xb0 [ 1650.972489][T11033] __x64_sys_ioctl+0xb3/0x200 [ 1650.977187][T11033] do_syscall_64+0x35/0xb0 [ 1650.981611][T11033] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1650.987510][T11033] RIP: 0033:0x7f94ad9f8059 [ 1650.991924][T11033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1651.011532][T11033] RSP: 002b:00007f94ac96d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1651.019947][T11033] RAX: ffffffffffffffda RBX: 00007f94adb0af60 RCX: 00007f94ad9f8059 [ 1651.027921][T11033] RDX: 0000000020000180 RSI: 0000000000008933 RDI: 0000000000000003 [ 1651.035892][T11033] RBP: 00007f94ac96d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1651.043949][T11033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 05:36:09 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (fail_nth: 4) 05:36:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) (fail_nth: 6) 05:36:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x48000) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0x8, 0x9, 0x40, 0x3}) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x48000) (async) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0x8, 0x9, 0x40, 0x3}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 05:36:09 executing program 1: getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x6, &(0x7f00000000c0)=0x2) socket$bt_rfcomm(0x1f, 0x0, 0x3) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) setsockopt$sock_void(r0, 0x1, 0x2d, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) 05:36:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x0, 0x2d, 0x8}]}, 0x10) 05:36:09 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) [ 1651.051917][T11033] R13: 00007ffef062a5ff R14: 00007f94ac96d300 R15: 0000000000022000 [ 1651.059902][T11033] [ 1651.071000][T11033] ERROR: Out of memory at tomoyo_realpath_from_path. 05:36:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20, 0x0, 0x0, 0x8}]}, 0x10) [ 1651.116568][T11055] FAULT_INJECTION: forcing a failure. [ 1651.116568][T11055] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.154030][T11065] FAULT_INJECTION: forcing a failure. [ 1651.154030][T11065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1651.174363][T11055] CPU: 1 PID: 11055 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1651.184384][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.194454][T11055] Call Trace: [ 1651.197741][T11055] [ 1651.200701][T11055] dump_stack_lvl+0xcd/0x134 [ 1651.205316][T11055] should_fail.cold+0x5/0xa [ 1651.209861][T11055] ? __vmalloc_node_range+0x46b/0x1130 [ 1651.215336][T11055] should_failslab+0x5/0x10 [ 1651.219847][T11055] __kmalloc_node+0x75/0x390 [ 1651.224473][T11055] __vmalloc_node_range+0x46b/0x1130 [ 1651.229799][T11055] ? vfree_atomic+0xe0/0xe0 [ 1651.234336][T11055] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1651.239924][T11055] __vmalloc+0x69/0x80 [ 1651.244015][T11055] ? bpf_prog_alloc_no_stats+0x38/0x350 [ 1651.249591][T11055] bpf_prog_alloc_no_stats+0x38/0x350 [ 1651.254987][T11055] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1651.261344][T11055] bpf_prog_alloc+0x28/0x1a0 [ 1651.265960][T11055] ? mark_held_locks+0x9f/0xe0 [ 1651.270751][T11055] __get_filter+0x115/0x4e0 [ 1651.275278][T11055] sk_attach_filter+0x1c/0x170 [ 1651.280063][T11055] sock_setsockopt+0x2104/0x2d70 [ 1651.285637][T11055] ? sock_set_timestamping+0x7a0/0x7a0 [ 1651.291112][T11055] ? aa_sk_perm+0x30f/0xaa0 [ 1651.295629][T11055] ? __fget_files+0x28c/0x470 [ 1651.300340][T11055] ? __sys_setsockopt+0x51b/0x6a0 [ 1651.305399][T11055] __sys_setsockopt+0x55e/0x6a0 [ 1651.310277][T11055] ? __ia32_sys_recv+0x100/0x100 [ 1651.315234][T11055] ? lock_downgrade+0x6e0/0x6e0 [ 1651.320100][T11055] ? lock_downgrade+0x6e0/0x6e0 [ 1651.324998][T11055] __x64_sys_setsockopt+0xba/0x150 [ 1651.330138][T11055] ? syscall_enter_from_user_mode+0x21/0x70 [ 1651.336062][T11055] do_syscall_64+0x35/0xb0 [ 1651.340501][T11055] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1651.346401][T11055] RIP: 0033:0x7fe6c8d37059 05:36:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x1d}, 0x10) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:09 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x2, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:09 executing program 1: getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x6, &(0x7f00000000c0)=0x2) socket$bt_rfcomm(0x1f, 0x0, 0x3) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) setsockopt$sock_void(r0, 0x1, 0x2d, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x6, &(0x7f00000000c0)=0x2) (async) socket$bt_rfcomm(0x1f, 0x0, 0x3) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) setsockopt$sock_void(r0, 0x1, 0x2d, 0x0, 0x0) (async) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) (async) [ 1651.350829][T11055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1651.370457][T11055] RSP: 002b:00007fe6c7cac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1651.378892][T11055] RAX: ffffffffffffffda RBX: 00007fe6c8e49f60 RCX: 00007fe6c8d37059 [ 1651.386886][T11055] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1651.394883][T11055] RBP: 00007fe6c7cac1d0 R08: 0000000000000010 R09: 0000000000000000 [ 1651.402876][T11055] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 1651.410867][T11055] R13: 00007fff19ce9f2f R14: 00007fe6c7cac300 R15: 0000000000022000 [ 1651.418884][T11055] [ 1651.422846][T11065] CPU: 0 PID: 11065 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1651.432857][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.442917][T11065] Call Trace: [ 1651.446193][T11065] [ 1651.449118][T11065] dump_stack_lvl+0xcd/0x134 [ 1651.453723][T11065] should_fail.cold+0x5/0xa [ 1651.458234][T11065] _copy_to_user+0x2c/0x150 [ 1651.462744][T11065] put_user_ifreq+0xf4/0x140 [ 1651.467345][T11065] sock_do_ioctl+0x1eb/0x230 [ 1651.472058][T11065] ? put_user_ifreq+0x140/0x140 [ 1651.476938][T11065] sock_ioctl+0x2f1/0x640 [ 1651.481277][T11065] ? br_ioctl_call+0xa0/0xa0 [ 1651.485878][T11065] ? __fget_files+0x28c/0x470 [ 1651.490577][T11065] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1651.496837][T11065] ? br_ioctl_call+0xa0/0xa0 [ 1651.501444][T11065] __x64_sys_ioctl+0x193/0x200 [ 1651.506226][T11065] do_syscall_64+0x35/0xb0 [ 1651.510650][T11065] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1651.516640][T11065] RIP: 0033:0x7f94ad9f8059 [ 1651.521052][T11065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1651.540839][T11065] RSP: 002b:00007f94ac96d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1651.549253][T11065] RAX: ffffffffffffffda RBX: 00007f94adb0af60 RCX: 00007f94ad9f8059 [ 1651.557222][T11065] RDX: 0000000020000180 RSI: 0000000000008933 RDI: 0000000000000003 [ 1651.565189][T11065] RBP: 00007f94ac96d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1651.573157][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1651.581209][T11065] R13: 00007ffef062a5ff R14: 00007f94ac96d300 R15: 0000000000022000 [ 1651.589191][T11065] 05:36:09 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x10, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) (fail_nth: 7) 05:36:09 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (fail_nth: 5) 05:36:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x0, 0x7f, 0xffff0001}, {0x20}]}, 0x10) 05:36:09 executing program 1: getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x6, &(0x7f00000000c0)=0x2) (async) socket$bt_rfcomm(0x1f, 0x0, 0x3) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) setsockopt$sock_void(r0, 0x1, 0x2d, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r1 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) 05:36:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x1d}, 0x10) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x1d}, 0x10) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 05:36:09 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, &(0x7f0000000180)={'vxcan0\x00'}) [ 1651.683737][T11083] FAULT_INJECTION: forcing a failure. [ 1651.683737][T11083] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.737714][T11083] CPU: 0 PID: 11083 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1651.747745][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.748304][T11096] FAULT_INJECTION: forcing a failure. [ 1651.748304][T11096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1651.757813][T11083] Call Trace: [ 1651.757829][T11083] [ 1651.757839][T11083] dump_stack_lvl+0xcd/0x134 [ 1651.757882][T11083] should_fail.cold+0x5/0xa 05:36:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x1d}, 0x10) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) [ 1651.757915][T11083] ? bpf_prog_alloc_no_stats+0xd5/0x350 [ 1651.757957][T11083] should_failslab+0x5/0x10 [ 1651.757978][T11083] kmem_cache_alloc_trace+0x55/0x2c0 [ 1651.758010][T11083] bpf_prog_alloc_no_stats+0xd5/0x350 [ 1651.758056][T11083] bpf_prog_alloc+0x28/0x1a0 [ 1651.758090][T11083] ? mark_held_locks+0x9f/0xe0 [ 1651.758127][T11083] __get_filter+0x115/0x4e0 [ 1651.758161][T11083] sk_attach_filter+0x1c/0x170 [ 1651.758196][T11083] sock_setsockopt+0x2104/0x2d70 [ 1651.758231][T11083] ? sock_set_timestamping+0x7a0/0x7a0 [ 1651.836213][T11083] ? aa_sk_perm+0x30f/0xaa0 [ 1651.840731][T11083] ? __fget_files+0x28c/0x470 [ 1651.845438][T11083] ? __sys_setsockopt+0x51b/0x6a0 [ 1651.850479][T11083] __sys_setsockopt+0x55e/0x6a0 [ 1651.855345][T11083] ? __ia32_sys_recv+0x100/0x100 [ 1651.860296][T11083] ? lock_downgrade+0x6e0/0x6e0 [ 1651.865160][T11083] ? lock_downgrade+0x6e0/0x6e0 [ 1651.870031][T11083] __x64_sys_setsockopt+0xba/0x150 [ 1651.875155][T11083] ? syscall_enter_from_user_mode+0x21/0x70 [ 1651.881068][T11083] do_syscall_64+0x35/0xb0 [ 1651.885502][T11083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1651.891412][T11083] RIP: 0033:0x7fe6c8d37059 [ 1651.895828][T11083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1651.915459][T11083] RSP: 002b:00007fe6c7cac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1651.923886][T11083] RAX: ffffffffffffffda RBX: 00007fe6c8e49f60 RCX: 00007fe6c8d37059 05:36:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x490100) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0x200) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x800, 0x8000) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000080)={0x81}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:09 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6ffa2882}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x108d0) 05:36:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:10 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) [ 1651.931882][T11083] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1651.939847][T11083] RBP: 00007fe6c7cac1d0 R08: 0000000000000010 R09: 0000000000000000 [ 1651.947816][T11083] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 1651.957085][T11083] R13: 00007fff19ce9f2f R14: 00007fe6c7cac300 R15: 0000000000022000 [ 1651.965069][T11083] 05:36:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x490100) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0x200) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x800, 0x8000) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000080)={0x81}) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x490100) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0x200) (async) syz_open_dev$dri(&(0x7f0000000040), 0x800, 0x8000) (async) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000080)={0x81}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) [ 1652.086957][T11096] CPU: 0 PID: 11096 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1652.096984][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.107067][T11096] Call Trace: [ 1652.110341][T11096] [ 1652.113268][T11096] dump_stack_lvl+0xcd/0x134 [ 1652.117875][T11096] should_fail.cold+0x5/0xa [ 1652.122388][T11096] _copy_to_user+0x2c/0x150 [ 1652.126903][T11096] simple_read_from_buffer+0xcc/0x160 [ 1652.132283][T11096] proc_fail_nth_read+0x187/0x220 [ 1652.137312][T11096] ? proc_exe_link+0x1d0/0x1d0 [ 1652.142079][T11096] ? security_file_permission+0xab/0xd0 [ 1652.147635][T11096] ? proc_exe_link+0x1d0/0x1d0 [ 1652.152422][T11096] vfs_read+0x1b5/0x600 [ 1652.156595][T11096] ksys_read+0x12d/0x250 [ 1652.160844][T11096] ? vfs_write+0xae0/0xae0 [ 1652.165266][T11096] ? syscall_enter_from_user_mode+0x21/0x70 [ 1652.171177][T11096] do_syscall_64+0x35/0xb0 [ 1652.175605][T11096] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1652.181498][T11096] RIP: 0033:0x7f94ad9aac0c [ 1652.185908][T11096] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1652.205513][T11096] RSP: 002b:00007f94ac96d160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1652.213923][T11096] RAX: ffffffffffffffda RBX: 00007f94adb0af60 RCX: 00007f94ad9aac0c [ 1652.221891][T11096] RDX: 000000000000000f RSI: 00007f94ac96d1e0 RDI: 0000000000000004 [ 1652.229872][T11096] RBP: 00007f94ac96d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.237928][T11096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1652.245893][T11096] R13: 00007ffef062a5ff R14: 00007f94ac96d300 R15: 0000000000022000 [ 1652.253878][T11096] 05:36:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) (fail_nth: 8) 05:36:10 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6ffa2882}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x108d0) 05:36:10 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}, 0x10) 05:36:10 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5421, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x490100) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0x200) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x800, 0x8000) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000080)={0x81}) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x490100) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0x200) (async) syz_open_dev$dri(&(0x7f0000000040), 0x800, 0x8000) (async) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000080)={0x81}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 05:36:10 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6ffa2882}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x108d0) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6ffa2882}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x108d0) (async) 05:36:10 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5450, &(0x7f0000000180)={'vxcan0\x00'}) [ 1652.351955][T11129] FAULT_INJECTION: forcing a failure. [ 1652.351955][T11129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1652.389285][T11129] CPU: 1 PID: 11129 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1652.399309][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.409385][T11129] Call Trace: [ 1652.412695][T11129] [ 1652.415643][T11129] dump_stack_lvl+0xcd/0x134 [ 1652.420281][T11129] should_fail.cold+0x5/0xa [ 1652.424818][T11129] _copy_from_user+0x2c/0x180 [ 1652.429534][T11129] __get_filter+0x170/0x4e0 [ 1652.434072][T11129] sk_attach_filter+0x1c/0x170 [ 1652.438874][T11129] sock_setsockopt+0x2104/0x2d70 [ 1652.443844][T11129] ? sock_set_timestamping+0x7a0/0x7a0 05:36:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}, 0x10) 05:36:10 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x79cf}, 0xe) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)={'syz_tun', 0x32, 0x39}, 0xa) syz_open_dev$loop(&(0x7f0000000100), 0xf9, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x8001, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x40000) ioctl$BLKRRPART(r1, 0x125f, 0x0) 05:36:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}, 0x10) [ 1652.449339][T11129] ? aa_sk_perm+0x30f/0xaa0 [ 1652.453858][T11129] ? __fget_files+0x28c/0x470 [ 1652.458582][T11129] ? __sys_setsockopt+0x51b/0x6a0 [ 1652.463659][T11129] __sys_setsockopt+0x55e/0x6a0 [ 1652.468551][T11129] ? __ia32_sys_recv+0x100/0x100 [ 1652.473520][T11129] ? lock_downgrade+0x6e0/0x6e0 [ 1652.478403][T11129] ? lock_downgrade+0x6e0/0x6e0 [ 1652.483301][T11129] __x64_sys_setsockopt+0xba/0x150 [ 1652.488445][T11129] ? syscall_enter_from_user_mode+0x21/0x70 [ 1652.494371][T11129] do_syscall_64+0x35/0xb0 05:36:10 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x79cf}, 0xe) (async) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)={'syz_tun', 0x32, 0x39}, 0xa) (async) syz_open_dev$loop(&(0x7f0000000100), 0xf9, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x8001, 0x4) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x40000) ioctl$BLKRRPART(r1, 0x125f, 0x0) [ 1652.498827][T11129] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1652.504748][T11129] RIP: 0033:0x7fe6c8d37059 [ 1652.509176][T11129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1652.528844][T11129] RSP: 002b:00007fe6c7cac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1652.537281][T11129] RAX: ffffffffffffffda RBX: 00007fe6c8e49f60 RCX: 00007fe6c8d37059 05:36:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) (fail_nth: 9) 05:36:10 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x79cf}, 0xe) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)={'syz_tun', 0x32, 0x39}, 0xa) syz_open_dev$loop(&(0x7f0000000100), 0xf9, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x8001, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x40000) ioctl$BLKRRPART(r1, 0x125f, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x79cf}, 0xe) (async) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)={'syz_tun', 0x32, 0x39}, 0xa) (async) syz_open_dev$loop(&(0x7f0000000100), 0xf9, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x8001, 0x4) (async) syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x40000) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) 05:36:10 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x2, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:10 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:10 executing program 1: socket(0x2, 0xa, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) pipe(&(0x7f0000000080)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0000) ioctl$I2C_RETRIES(r0, 0x701, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) 05:36:10 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5451, &(0x7f0000000180)={'vxcan0\x00'}) [ 1652.545273][T11129] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1652.553266][T11129] RBP: 00007fe6c7cac1d0 R08: 0000000000000010 R09: 0000000000000000 [ 1652.561428][T11129] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 1652.569410][T11129] R13: 00007fff19ce9f2f R14: 00007fe6c7cac300 R15: 0000000000022000 [ 1652.577412][T11129] 05:36:10 executing program 2: ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x2, 0x7, 0xfffffff8, 0x5, 0x7ff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8}, 0xc) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x810, 0x0, 0xffffdd09, 0x0, r1, 0x8, '\x00', 0x0, r2, 0x3, 0x1, 0x1}, 0x48) 05:36:10 executing program 1: socket(0x2, 0xa, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) pipe(&(0x7f0000000080)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0000) ioctl$I2C_RETRIES(r0, 0x701, 0x400200) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) 05:36:10 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) [ 1652.700692][T11171] FAULT_INJECTION: forcing a failure. [ 1652.700692][T11171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1652.738438][T11171] CPU: 0 PID: 11171 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 05:36:10 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x10, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:10 executing program 2: ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x2, 0x7, 0xfffffff8, 0x5, 0x7ff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8}, 0xc) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x810, 0x0, 0xffffdd09, 0x0, r1, 0x8, '\x00', 0x0, r2, 0x3, 0x1, 0x1}, 0x48) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x2, 0x7, 0xfffffff8, 0x5, 0x7ff}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8}, 0xc) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x810, 0x0, 0xffffdd09, 0x0, r1, 0x8, '\x00', 0x0, r2, 0x3, 0x1, 0x1}, 0x48) (async) [ 1652.748470][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.758544][T11171] Call Trace: [ 1652.761839][T11171] [ 1652.764786][T11171] dump_stack_lvl+0xcd/0x134 [ 1652.769424][T11171] should_fail.cold+0x5/0xa [ 1652.773967][T11171] _copy_from_user+0x2c/0x180 [ 1652.778683][T11171] __get_filter+0x170/0x4e0 [ 1652.783214][T11171] sk_attach_filter+0x1c/0x170 [ 1652.788006][T11171] sock_setsockopt+0x2104/0x2d70 [ 1652.792993][T11171] ? sock_set_timestamping+0x7a0/0x7a0 05:36:10 executing program 2: ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x2, 0x7, 0xfffffff8, 0x5, 0x7ff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8}, 0xc) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x810, 0x0, 0xffffdd09, 0x0, r1, 0x8, '\x00', 0x0, r2, 0x3, 0x1, 0x1}, 0x48) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x2, 0x7, 0xfffffff8, 0x5, 0x7ff}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8}, 0xc) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x810, 0x0, 0xffffdd09, 0x0, r1, 0x8, '\x00', 0x0, r2, 0x3, 0x1, 0x1}, 0x48) (async) [ 1652.798491][T11171] ? aa_sk_perm+0x30f/0xaa0 [ 1652.803013][T11171] ? __fget_files+0x28c/0x470 [ 1652.807748][T11171] ? __sys_setsockopt+0x51b/0x6a0 [ 1652.812806][T11171] __sys_setsockopt+0x55e/0x6a0 [ 1652.817692][T11171] ? __ia32_sys_recv+0x100/0x100 [ 1652.822659][T11171] ? lock_downgrade+0x6e0/0x6e0 [ 1652.827538][T11171] ? lock_downgrade+0x6e0/0x6e0 [ 1652.832431][T11171] __x64_sys_setsockopt+0xba/0x150 [ 1652.837579][T11171] ? syscall_enter_from_user_mode+0x21/0x70 [ 1652.843511][T11171] do_syscall_64+0x35/0xb0 [ 1652.848074][T11171] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1652.853987][T11171] RIP: 0033:0x7fe6c8d37059 [ 1652.858430][T11171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1652.878052][T11171] RSP: 002b:00007fe6c7cac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1652.886483][T11171] RAX: ffffffffffffffda RBX: 00007fe6c8e49f60 RCX: 00007fe6c8d37059 05:36:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) (fail_nth: 10) 05:36:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:10 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5452, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:10 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:10 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:10 executing program 1: socket(0x2, 0xa, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) pipe(&(0x7f0000000080)) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0000) ioctl$I2C_RETRIES(r0, 0x701, 0x400200) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) [ 1652.894464][T11171] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1652.902427][T11171] RBP: 00007fe6c7cac1d0 R08: 0000000000000010 R09: 0000000000000000 [ 1652.910422][T11171] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 1652.918382][T11171] R13: 00007fff19ce9f2f R14: 00007fe6c7cac300 R15: 0000000000022000 [ 1652.926368][T11171] 05:36:11 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async, rerun: 64) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:11 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:11 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5460, &(0x7f0000000180)={'vxcan0\x00'}) [ 1653.047684][T11207] FAULT_INJECTION: forcing a failure. [ 1653.047684][T11207] name failslab, interval 1, probability 0, space 0, times 0 05:36:11 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:11 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6fa9b80dfcc7291d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}}, 0x4041) [ 1653.165561][T11207] CPU: 1 PID: 11207 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1653.175582][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.185656][T11207] Call Trace: [ 1653.188949][T11207] [ 1653.191890][T11207] dump_stack_lvl+0xcd/0x134 [ 1653.196519][T11207] should_fail.cold+0x5/0xa [ 1653.201052][T11207] should_failslab+0x5/0x10 [ 1653.205579][T11207] __kmalloc_track_caller+0x79/0x320 [ 1653.210886][T11207] ? bpf_prog_store_orig_filter+0x103/0x1e0 [ 1653.216821][T11207] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1653.222454][T11207] kmemdup+0x23/0x50 [ 1653.226355][T11207] bpf_prog_store_orig_filter+0x103/0x1e0 [ 1653.232101][T11207] ? _copy_from_user+0xed/0x180 [ 1653.236949][T11207] __get_filter+0x1ef/0x4e0 [ 1653.241532][T11207] sk_attach_filter+0x1c/0x170 [ 1653.246293][T11207] sock_setsockopt+0x2104/0x2d70 [ 1653.251246][T11207] ? sock_set_timestamping+0x7a0/0x7a0 [ 1653.256697][T11207] ? aa_sk_perm+0x30f/0xaa0 [ 1653.261190][T11207] ? __fget_files+0x28c/0x470 [ 1653.265872][T11207] ? __sys_setsockopt+0x51b/0x6a0 [ 1653.270896][T11207] __sys_setsockopt+0x55e/0x6a0 [ 1653.275751][T11207] ? __ia32_sys_recv+0x100/0x100 [ 1653.280710][T11207] ? lock_downgrade+0x6e0/0x6e0 [ 1653.285583][T11207] ? lock_downgrade+0x6e0/0x6e0 [ 1653.290437][T11207] __x64_sys_setsockopt+0xba/0x150 [ 1653.295544][T11207] ? syscall_enter_from_user_mode+0x21/0x70 [ 1653.301439][T11207] do_syscall_64+0x35/0xb0 [ 1653.305846][T11207] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1653.311727][T11207] RIP: 0033:0x7fe6c8d37059 [ 1653.316124][T11207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1653.335726][T11207] RSP: 002b:00007fe6c7cac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1653.344151][T11207] RAX: ffffffffffffffda RBX: 00007fe6c8e49f60 RCX: 00007fe6c8d37059 [ 1653.352123][T11207] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1653.360083][T11207] RBP: 00007fe6c7cac1d0 R08: 0000000000000010 R09: 0000000000000000 [ 1653.368039][T11207] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000002 [ 1653.376008][T11207] R13: 00007fff19ce9f2f R14: 00007fe6c7cac300 R15: 0000000000022000 [ 1653.384000][T11207] 05:36:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) (fail_nth: 11) 05:36:11 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5421, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:11 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8901, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:11 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 05:36:11 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6fa9b80dfcc7291d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}}, 0x4041) 05:36:11 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5450, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:11 executing program 5: r0 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) [ 1653.499411][T11240] FAULT_INJECTION: forcing a failure. [ 1653.499411][T11240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1653.516847][T11240] CPU: 1 PID: 11240 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1653.526865][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.537028][T11240] Call Trace: [ 1653.540323][T11240] [ 1653.543267][T11240] dump_stack_lvl+0xcd/0x134 [ 1653.547893][T11240] should_fail.cold+0x5/0xa [ 1653.552429][T11240] _copy_to_user+0x2c/0x150 [ 1653.556965][T11240] simple_read_from_buffer+0xcc/0x160 [ 1653.562368][T11240] proc_fail_nth_read+0x187/0x220 [ 1653.567422][T11240] ? proc_exe_link+0x1d0/0x1d0 [ 1653.572218][T11240] ? security_file_permission+0xab/0xd0 [ 1653.577803][T11240] ? proc_exe_link+0x1d0/0x1d0 [ 1653.582588][T11240] vfs_read+0x1b5/0x600 [ 1653.586774][T11240] ksys_read+0x12d/0x250 [ 1653.591041][T11240] ? vfs_write+0xae0/0xae0 05:36:11 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8902, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x12d440) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:11 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6fa9b80dfcc7291d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}}, 0x4041) [ 1653.595500][T11240] ? syscall_enter_from_user_mode+0x21/0x70 [ 1653.601442][T11240] do_syscall_64+0x35/0xb0 [ 1653.605891][T11240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1653.611814][T11240] RIP: 0033:0x7fe6c8ce9c0c [ 1653.616435][T11240] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1653.636066][T11240] RSP: 002b:00007fe6c7cac160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 05:36:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x12d440) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x12d440) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 05:36:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:11 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8903, &(0x7f0000000180)={'vxcan0\x00'}) [ 1653.644489][T11240] RAX: ffffffffffffffda RBX: 00007fe6c8e49f60 RCX: 00007fe6c8ce9c0c [ 1653.652461][T11240] RDX: 000000000000000f RSI: 00007fe6c7cac1e0 RDI: 0000000000000004 [ 1653.660425][T11240] RBP: 00007fe6c7cac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1653.668396][T11240] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000002 [ 1653.676366][T11240] R13: 00007fff19ce9f2f R14: 00007fe6c7cac300 R15: 0000000000022000 [ 1653.684370][T11240] 05:36:11 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5451, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:11 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000100)="bcb1f40bca2af77544fa3a9a5757bd9325c9e3348f6bad6d6e84ec2d54667614cdc7b85b89df42dfadbf8516e12bc9d1bfc47db0dcc63fc7672f56b394a3597221b4588cb406fe2c276b1193f34d6ab1936d639c6a1a78f35992620ebcf3e2b447a70213daf58e4be0738189b3ec3e6a59c9126a15b325e1b498e062a3bd79c1e4ed66af565b640895288854095869b9aab7fb85ae5a58f91dc0ae2503b796726f794fcb6d595c6520d698", 0xab}) r1 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) getsockname(r2, &(0x7f0000000080)=@hci, &(0x7f0000000200)=0xb1) 05:36:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x2, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:11 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5452, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x12d440) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x12d440) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 05:36:11 executing program 5: r0 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:11 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8904, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:11 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000100)="bcb1f40bca2af77544fa3a9a5757bd9325c9e3348f6bad6d6e84ec2d54667614cdc7b85b89df42dfadbf8516e12bc9d1bfc47db0dcc63fc7672f56b394a3597221b4588cb406fe2c276b1193f34d6ab1936d639c6a1a78f35992620ebcf3e2b447a70213daf58e4be0738189b3ec3e6a59c9126a15b325e1b498e062a3bd79c1e4ed66af565b640895288854095869b9aab7fb85ae5a58f91dc0ae2503b796726f794fcb6d595c6520d698", 0xab}) (async) r1 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) getsockname(r2, &(0x7f0000000080)=@hci, &(0x7f0000000200)=0xb1) 05:36:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x3, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:11 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5460, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x5, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x20000005, 0x181040) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x240000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4004080) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r5, 0x2}) 05:36:12 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000100)="bcb1f40bca2af77544fa3a9a5757bd9325c9e3348f6bad6d6e84ec2d54667614cdc7b85b89df42dfadbf8516e12bc9d1bfc47db0dcc63fc7672f56b394a3597221b4588cb406fe2c276b1193f34d6ab1936d639c6a1a78f35992620ebcf3e2b447a70213daf58e4be0738189b3ec3e6a59c9126a15b325e1b498e062a3bd79c1e4ed66af565b640895288854095869b9aab7fb85ae5a58f91dc0ae2503b796726f794fcb6d595c6520d698", 0xab}) (async) r1 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) getsockname(r2, &(0x7f0000000080)=@hci, &(0x7f0000000200)=0xb1) 05:36:12 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8906, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8901, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 5: r0 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8907, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x20000005, 0x181040) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x240000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4004080) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r5, 0x2}) 05:36:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x6, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:12 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8902, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 1: r0 = socket(0x2, 0xa, 0x0) r1 = accept4(r0, &(0x7f0000000080)=@rc, &(0x7f0000000000)=0x80, 0x800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) 05:36:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x20000005, 0x181040) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x240000) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4004080) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r5, 0x2}) 05:36:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x7, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:12 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 5: r0 = socket(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8903, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x14, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x101, 0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000), 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x6, 0x4, 0x7, 0x96b, 0x7, 0x1ff, 0x1000, 0x7fff], 0x8, 0x800}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) 05:36:12 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890c, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 1: r0 = socket(0x2, 0xa, 0x0) r1 = accept4(r0, &(0x7f0000000080)=@rc, &(0x7f0000000000)=0x80, 0x800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) socket(0x2, 0xa, 0x0) (async) accept4(r0, &(0x7f0000000080)=@rc, &(0x7f0000000000)=0x80, 0x800) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) (async) 05:36:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x300, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:12 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8904, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8910, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x101, 0x8000) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000), 0x2) (async, rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x6, 0x4, 0x7, 0x96b, 0x7, 0x1ff, 0x1000, 0x7fff], 0x8, 0x800}) (async, rerun: 32) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) 05:36:12 executing program 1: r0 = socket(0x2, 0xa, 0x0) r1 = accept4(r0, &(0x7f0000000080)=@rc, &(0x7f0000000000)=0x80, 0x800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) 05:36:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x6100, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:12 executing program 5: r0 = socket(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8906, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8911, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 1: bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000), 0x14) r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x6b6220, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="009f34ac421bff3bf9250b00000008003100ffffffff08003a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x4004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r6) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x4c, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r7, 0x932, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) 05:36:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x6200, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:12 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8907, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8912, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x101, 0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000), 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x6, 0x4, 0x7, 0x96b, 0x7, 0x1ff, 0x1000, 0x7fff], 0x8, 0x800}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x101, 0x8000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000), 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x6, 0x4, 0x7, 0x96b, 0x7, 0x1ff, 0x1000, 0x7fff], 0x8, 0x800}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) (async) 05:36:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0xe000, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:12 executing program 1: bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000), 0x14) (async) r0 = socket(0x2, 0xa, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x6b6220, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) accept4$alg(r1, 0x0, 0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="009f34ac421bff3bf9250b00000008003100ffffffff08003a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x4004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r6) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x4c, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r7, 0x932, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x14) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) 05:36:12 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8913, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 5: r0 = socket(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1a21dd, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x5, 0x480000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0x100, 0x81}) 05:36:12 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890c, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:12 executing program 1: bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000), 0x14) r0 = socket(0x2, 0xa, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x6b6220, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="009f34ac421bff3bf9250b00000008003100ffffffff08003a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x4004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x20900, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000480)={0x0, 0x8, 0x8, &(0x7f0000000440)={0xd, "83b92537ef2a13d051243d87c1bf29c80ffe43fa7a09651a58f858993aea639433"}}) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r6) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x4c, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x8004) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r7, 0x932, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) 05:36:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) syz_open_dev$rtc(&(0x7f0000000000), 0x5, 0x480000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0x100, 0x81}) 05:36:13 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8914, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0xffffff1f, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:13 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8910, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891c, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x5, 0x480000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0x100, 0x81}) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) syz_open_dev$rtc(&(0x7f0000000000), 0x5, 0x480000) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0x100, 0x81}) (async) 05:36:13 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000000080)=""/96, &(0x7f0000000000)=0x60) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000200)=0x23d, 0x2) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0), 0x2) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000140)=0x2, 0x2) 05:36:13 executing program 5: socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:13 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891d, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8911, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250d000000050030000000000005003000010000000800390001000000080032000500000008002c00000000000500300000000000ea7ba3c4bf2bdb49e757e7e86d88d9c6fe7aca8385d88a184119bdc3159c840fc636613b2915461ed1574e61c7c1038b6a41fcf9afeca04abb05b56be7505d0a682d7f4c1db621295c1b4c4884dd450686db76608952cd6d06f04899d0b761ed5390e81df9c2bc2934a798fd7d5c129c27226979d83f1459c9988e0f19"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 05:36:13 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000000080)=""/96, &(0x7f0000000000)=0x60) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000200)=0x23d, 0x2) (async, rerun: 32) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0), 0x2) (rerun: 32) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000140)=0x2, 0x2) 05:36:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x5, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:13 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8912, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891e, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250d000000050030000000000005003000010000000800390001000000080032000500000008002c00000000000500300000000000ea7ba3c4bf2bdb49e757e7e86d88d9c6fe7aca8385d88a184119bdc3159c840fc636613b2915461ed1574e61c7c1038b6a41fcf9afeca04abb05b56be7505d0a682d7f4c1db621295c1b4c4884dd450686db76608952cd6d06f04899d0b761ed5390e81df9c2bc2934a798fd7d5c129c27226979d83f1459c9988e0f19"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 05:36:13 executing program 5: socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x6, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:13 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000000080)=""/96, &(0x7f0000000000)=0x60) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180), 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000200)=0x23d, 0x2) (async) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0), 0x2) (async) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000140)=0x2, 0x2) 05:36:13 executing program 5: socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x541b, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8913, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250d000000050030000000000005003000010000000800390001000000080032000500000008002c00000000000500300000000000ea7ba3c4bf2bdb49e757e7e86d88d9c6fe7aca8385d88a184119bdc3159c840fc636613b2915461ed1574e61c7c1038b6a41fcf9afeca04abb05b56be7505d0a682d7f4c1db621295c1b4c4884dd450686db76608952cd6d06f04899d0b761ed5390e81df9c2bc2934a798fd7d5c129c27226979d83f1459c9988e0f19"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250d000000050030000000000005003000010000000800390001000000080032000500000008002c00000000000500300000000000ea7ba3c4bf2bdb49e757e7e86d88d9c6fe7aca8385d88a184119bdc3159c840fc636613b2915461ed1574e61c7c1038b6a41fcf9afeca04abb05b56be7505d0a682d7f4c1db621295c1b4c4884dd450686db76608952cd6d06f04899d0b761ed5390e81df9c2bc2934a798fd7d5c129c27226979d83f1459c9988e0f19"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) 05:36:13 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891f, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x7, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:13 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) 05:36:13 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8914, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8920, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 05:36:13 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) 05:36:13 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) 05:36:13 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8921, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891c, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x9, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 05:36:13 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) 05:36:13 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) 05:36:13 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8922, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891d, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 05:36:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:13 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) 05:36:13 executing program 1: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0xf8, 0x1) r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x1, 0x7, 0x5, 0x2000, 0x0, 0x6}) 05:36:13 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8923, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xb, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:13 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891e, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:13 executing program 1: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0xf8, 0x1) r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x1, 0x7, 0x5, 0x2000, 0x0, 0x6}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0xf8, 0x1) (async) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) (async) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x1, 0x7, 0x5, 0x2000, 0x0, 0x6}) (async) 05:36:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1f, 0x8, 0x473, 0x0, 0x7, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 05:36:14 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8924, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891f, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 1: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0xf8, 0x1) r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x1, 0x7, 0x5, 0x2000, 0x0, 0x6}) 05:36:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1f, 0x8, 0x473, 0x0, 0x7, 0xffffffffffffffff}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 05:36:14 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8927, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8920, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x947e}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffc0}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x77ba6ca55660e2fc}, 0x4004) 05:36:14 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8929, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1f, 0x8, 0x473, 0x0, 0x7, 0xffffffffffffffff}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 1656.206141][T11537] blktrace: Concurrent blktraces are not allowed on loop0 05:36:14 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8921, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xe, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8930, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x947e}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffc0}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x77ba6ca55660e2fc}, 0x4004) [ 1656.304530][T11549] blktrace: Concurrent blktraces are not allowed on loop0 05:36:14 executing program 2: ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 05:36:14 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8922, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 2: ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 05:36:14 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8932, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xf, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8923, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x947e}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffc0}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x77ba6ca55660e2fc}, 0x4004) 05:36:14 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8937, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 2: ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) (async) 05:36:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x10, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 5: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf2509000000080032000004000005002d0000000000080032000600000018fc781eadfdf9b005002d000000000008003400030000000a00090053009597d7cf0000"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 05:36:14 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8924, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 2: prctl$PR_GET_DUMPABLE(0x3) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:14 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8940, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x12, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 5: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf2509000000080032000004000005002d0000000000080032000600000018fc781eadfdf9b005002d000000000008003400030000000a00090053009597d7cf0000"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 05:36:14 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8927, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 2: prctl$PR_GET_DUMPABLE(0x3) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x14, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8941, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf2509000000080032000004000005002d0000000000080032000600000018fc781eadfdf9b005002d000000000008003400030000000a00090053009597d7cf0000"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 05:36:14 executing program 5: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 2: prctl$PR_GET_DUMPABLE(0x3) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) prctl$PR_GET_DUMPABLE(0x3) (async) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 05:36:14 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8929, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8942, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x15, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, 0x0, 0x0) 05:36:14 executing program 1: r0 = socket(0x2, 0x4, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:36:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x19, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6, 0x4, 0x7}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000), 0x2, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000200)={0x7, 0x8, 0x200000, 0x1000, 0xc45, 0xfffffffe}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000240)={0xcf, 0x8, 0x320, 0x2, 0x2, 0x7, 0x2b}) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs(r3, 0x0) syz_open_procfs(r3, &(0x7f00000003c0)='mountinfo\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) 05:36:15 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8930, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8943, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, 0x0, 0x0) 05:36:15 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8932, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:15 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8946, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6, 0x4, 0x7}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000200)={0x7, 0x8, 0x200000, 0x1000, 0xc45, 0xfffffffe}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000240)={0xcf, 0x8, 0x320, 0x2, 0x2, 0x7, 0x2b}) (async) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs(r3, 0x0) syz_open_procfs(r3, &(0x7f00000003c0)='mountinfo\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) 05:36:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, 0x0, 0x0) 05:36:15 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8937, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 1: r0 = socket(0x2, 0x4, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) socket(0x2, 0x4, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) 05:36:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1d, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000300)={0x0, 0x0}, 0x10) 05:36:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6, 0x4, 0x7}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000), 0x2, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000200)={0x7, 0x8, 0x200000, 0x1000, 0xc45, 0xfffffffe}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000240)={0xcf, 0x8, 0x320, 0x2, 0x2, 0x7, 0x2b}) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs(r3, 0x0) syz_open_procfs(r3, &(0x7f00000003c0)='mountinfo\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6, 0x4, 0x7}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000), 0x2, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000200)={0x7, 0x8, 0x200000, 0x1000, 0xc45, 0xfffffffe}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000240)={0xcf, 0x8, 0x320, 0x2, 0x2, 0x7, 0x2b}) (async) getpgrp(0xffffffffffffffff) (async) syz_open_procfs(r3, 0x0) (async) syz_open_procfs(r3, &(0x7f00000003c0)='mountinfo\x00') (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) 05:36:15 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8947, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8940, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8948, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x21, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000300)={0x0, 0x0}, 0x10) 05:36:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:15 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8941, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8949, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 1: r0 = socket(0x2, 0x4, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:36:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000300)={0x0, 0x0}, 0x10) 05:36:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x22, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:15 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8942, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x894c, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8943, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) (rerun: 64) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x10) 05:36:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x23, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:15 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8953, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x10) 05:36:15 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x7f, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={r1, 0x3}) r2 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) 05:36:15 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8946, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8, 0x8, 0x7, 0x5, 0x0, 0x2}) 05:36:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x10) 05:36:15 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8955, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x25, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}, 0x10) 05:36:16 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8947, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8, 0x8, 0x7, 0x5, 0x0, 0x2}) 05:36:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8970, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x7f, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={r1, 0x3}) r2 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) 05:36:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8971, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8, 0x8, 0x7, 0x5, 0x0, 0x2}) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8, 0x8, 0x7, 0x5, 0x0, 0x2}) (async) 05:36:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x28, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8948, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x7f, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={r1, 0x3}) r2 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x7f, 0x0, 0x10000}) (async) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={r1, 0x3}) (async) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) (async) 05:36:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8982, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x29, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8949, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x16082) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0x5, 0x7ff}) 05:36:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8983, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xbede, [0x6d7, 0x6], 0xdfbf}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:36:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x16082) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0x5, 0x7ff}) 05:36:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x894c, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8990, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xbede, [0x6d7, 0x6], 0xdfbf}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:36:16 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x16082) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0x5, 0x7ff}) 05:36:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2b, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8953, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8992, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xc0001, 0x0) syz_open_dev$rtc(&(0x7f0000000040), 0xffff, 0x801) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 05:36:16 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xbede, [0x6d7, 0x6], 0xdfbf}, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:36:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8955, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8993, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2d, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2f252702, 0x4) 05:36:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xc0001, 0x0) syz_open_dev$rtc(&(0x7f0000000040), 0xffff, 0x801) (async) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 05:36:16 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8970, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8994, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xc0001, 0x0) syz_open_dev$rtc(&(0x7f0000000040), 0xffff, 0x801) (async) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 05:36:16 executing program 5: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2e, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2f252702, 0x4) 05:36:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8995, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8971, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000840) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) ioctl$I2C_TENBIT(r5, 0x704, 0x1) 05:36:16 executing program 5: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2f, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:16 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2f252702, 0x4) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2f252702, 0x4) (async) 05:36:16 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8982, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a0, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:16 executing program 5: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000840) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) (async, rerun: 32) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) ioctl$I2C_TENBIT(r5, 0x704, 0x1) 05:36:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:17 executing program 1: r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) getsockname(r1, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000000)=0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:36:17 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8983, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a1, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x32, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, 0x0, 0x0) 05:36:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000}, 0x4048080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000840) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) (async) ioctl$I2C_TENBIT(r5, 0x704, 0x1) 05:36:17 executing program 1: r0 = socket(0x2, 0xa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) getsockname(r1, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000000)=0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) socket(0x2, 0xa, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) getsockname(r1, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000000)=0x80) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) 05:36:17 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8990, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a2, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, 0x0, 0x0) 05:36:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:17 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8992, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 1: r0 = socket(0x2, 0xa, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) getsockname(r1, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000000)=0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 05:36:17 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a3, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf2b, 0x8c0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, 0x0, 0x0) 05:36:17 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8993, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x34, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf2b, 0x8c0) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf2b, 0x8c0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 05:36:17 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89b0, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x32fdd48dfcbe3a31, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) 05:36:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000300)={0x0, 0x0}, 0x10) 05:36:17 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8994, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x400448c9, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf2b, 0x8c0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:17 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x32fdd48dfcbe3a31, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) socket(0x2, 0xa, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x32fdd48dfcbe3a31, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) (async) 05:36:17 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8995, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000300)={0x0, 0x0}, 0x10) 05:36:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:17 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x400448dd, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5ae, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:17 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a0, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000300)={0x0, 0x0}, 0x10) 05:36:17 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x32fdd48dfcbe3a31, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) socket(0x2, 0xa, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x32fdd48dfcbe3a31, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) (async) 05:36:17 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x400454ca, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3d, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5ae, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x5ae, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 05:36:17 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a1, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3e, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:17 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x19, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xe312c4a85eed2773, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80000) 05:36:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x10) 05:36:17 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x40049409, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5ae, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x5ae, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 05:36:17 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a2, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:17 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x19, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xe312c4a85eed2773, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80000) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x19, 0x4) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xe312c4a85eed2773, 0x0) (async) accept4$alg(r2, 0x0, 0x0, 0x80000) (async) 05:36:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x41, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7fffffff, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x10) 05:36:17 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x40086602, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a3, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7fffffff, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x10) 05:36:18 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x19, 0x4) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xe312c4a85eed2773, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80000) 05:36:18 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x40186366, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x43, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89b0, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7fffffff, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 05:36:18 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000140)=[0x300, 0x101, 0x8], 0x3, 0x80000}) r1 = socket(0x2, 0xa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000240)=0x4b3) 05:36:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}, 0x10) 05:36:18 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x401c5820, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x400448c9, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001280)={0x53, 0xfffffffffffffffc, 0xe1, 0x0, @scatter={0x3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000140)=""/4096, 0x1000}]}, &(0x7f0000001140)="206e8b705504031a908e65644872b006805bfc94bcf2c49f4df8d82e66615c93b5b45291486a6c5ca99d2554c42582e980617546567734993919c44ded509902bd1e2c3550e80a78800c52a72d527be053380a0a9b4ff1f81498dc4f6a8c35e9c79fb6a713409508ffabc6a2e5ed26b612f9614f12e3c94ac811dd0615644c117af5a1166f18aee7636ab22e0ad08c6c8f7244b849a6476b43b3fd19c08a2adc88a460fb92e20be6d204c5c51927993620b7ce2010cc01827831914c90f484ebce0d06b704e06001fd02664b04dc7a8cde86fa2ead6c4c11d64423ccbcaead6e1d", &(0x7f00000000c0)=""/35, 0x1000, 0x22, 0x2, &(0x7f0000001240)}) 05:36:18 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x4020940d, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000140)=[0x300, 0x101, 0x8], 0x3, 0x80000}) r1 = socket(0x2, 0xa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) (async) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000240)=0x4b3) 05:36:18 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x400448dd, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x45, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001280)={0x53, 0xfffffffffffffffc, 0xe1, 0x0, @scatter={0x3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000140)=""/4096, 0x1000}]}, &(0x7f0000001140)="206e8b705504031a908e65644872b006805bfc94bcf2c49f4df8d82e66615c93b5b45291486a6c5ca99d2554c42582e980617546567734993919c44ded509902bd1e2c3550e80a78800c52a72d527be053380a0a9b4ff1f81498dc4f6a8c35e9c79fb6a713409508ffabc6a2e5ed26b612f9614f12e3c94ac811dd0615644c117af5a1166f18aee7636ab22e0ad08c6c8f7244b849a6476b43b3fd19c08a2adc88a460fb92e20be6d204c5c51927993620b7ce2010cc01827831914c90f484ebce0d06b704e06001fd02664b04dc7a8cde86fa2ead6c4c11d64423ccbcaead6e1d", &(0x7f00000000c0)=""/35, 0x1000, 0x22, 0x2, &(0x7f0000001240)}) 05:36:18 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x80086301, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x400454ca, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000140)=[0x300, 0x101, 0x8], 0x3, 0x80000}) r1 = socket(0x2, 0xa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000240)=0x4b3) pipe(&(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000140)=[0x300, 0x101, 0x8], 0x3, 0x80000}) (async) socket(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) (async) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000240)=0x4b3) (async) 05:36:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001280)={0x53, 0xfffffffffffffffc, 0xe1, 0x0, @scatter={0x3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000140)=""/4096, 0x1000}]}, &(0x7f0000001140)="206e8b705504031a908e65644872b006805bfc94bcf2c49f4df8d82e66615c93b5b45291486a6c5ca99d2554c42582e980617546567734993919c44ded509902bd1e2c3550e80a78800c52a72d527be053380a0a9b4ff1f81498dc4f6a8c35e9c79fb6a713409508ffabc6a2e5ed26b612f9614f12e3c94ac811dd0615644c117af5a1166f18aee7636ab22e0ad08c6c8f7244b849a6476b43b3fd19c08a2adc88a460fb92e20be6d204c5c51927993620b7ce2010cc01827831914c90f484ebce0d06b704e06001fd02664b04dc7a8cde86fa2ead6c4c11d64423ccbcaead6e1d", &(0x7f00000000c0)=""/35, 0x1000, 0x22, 0x2, &(0x7f0000001240)}) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001280)={0x53, 0xfffffffffffffffc, 0xe1, 0x0, @scatter={0x3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000140)=""/4096, 0x1000}]}, &(0x7f0000001140)="206e8b705504031a908e65644872b006805bfc94bcf2c49f4df8d82e66615c93b5b45291486a6c5ca99d2554c42582e980617546567734993919c44ded509902bd1e2c3550e80a78800c52a72d527be053380a0a9b4ff1f81498dc4f6a8c35e9c79fb6a713409508ffabc6a2e5ed26b612f9614f12e3c94ac811dd0615644c117af5a1166f18aee7636ab22e0ad08c6c8f7244b849a6476b43b3fd19c08a2adc88a460fb92e20be6d204c5c51927993620b7ce2010cc01827831914c90f484ebce0d06b704e06001fd02664b04dc7a8cde86fa2ead6c4c11d64423ccbcaead6e1d", &(0x7f00000000c0)=""/35, 0x1000, 0x22, 0x2, &(0x7f0000001240)}) (async) 05:36:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x80086601, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x40049409, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x9ca5, 0x7, 0x0, 0x100, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 05:36:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x48, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080), 0x4) 05:36:18 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x40086602, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x80108906, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x9ca5, 0x7, 0x0, 0x100, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 05:36:18 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080), 0x4) 05:36:18 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x80108907, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x49, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x40186366, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x9ca5, 0x7, 0x0, 0x100, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) [ 1660.807464][T12089] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 1660.819307][T12089] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1660.827726][T12089] CPU: 1 PID: 12089 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1660.839028][T12089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.849106][T12089] RIP: 0010:sock_setsockopt+0x853/0x2d70 05:36:18 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) 05:36:18 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080), 0x4) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) pipe(&(0x7f0000000000)) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080), 0x4) (async) 05:36:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xff, 0x200400) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0xc3, &(0x7f00000000c0)=0x4) 05:36:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xff, 0x200400) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0xc3, &(0x7f00000000c0)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0xff, 0x200400) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) (async) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0xc3, &(0x7f00000000c0)=0x4) (async) 05:36:18 executing program 5: socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x20}]}, 0x10) [ 1660.855123][T12089] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 2a 22 00 00 48 8b 83 20 01 00 00 ba ff ff 37 00 48 c1 e2 2a 48 8d 78 08 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 ed 21 00 00 48 8b 40 08 48 8b b5 90 fe ff ff 48 [ 1660.874928][T12089] RSP: 0018:ffffc90013267c70 EFLAGS: 00010202 [ 1660.881012][T12089] RAX: 0000000000000000 RBX: ffffffff8c414300 RCX: 0000000000000001 [ 1660.889002][T12089] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1660.896988][T12089] RBP: ffffc90013267de8 R08: 0000000000000001 R09: ffffffff904d8387 05:36:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0xff, 0x200400) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) (async) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0xc3, &(0x7f00000000c0)=0x4) [ 1660.904979][T12089] R10: fffffbfff209b070 R11: 0000000000000000 R12: ffff88807d299234 [ 1660.913000][T12089] R13: ffff88807d2994a0 R14: 0000000000000001 R15: ffff88807d299000 [ 1660.921078][T12089] FS: 00007fe6c7cac700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1660.930109][T12089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1660.936698][T12089] CR2: 0000000020000300 CR3: 0000000075232000 CR4: 00000000003506e0 [ 1660.944764][T12089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1660.952743][T12089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1660.960728][T12089] Call Trace: [ 1660.964004][T12089] [ 1660.966937][T12089] ? sock_set_timestamping+0x7a0/0x7a0 [ 1660.972412][T12089] ? aa_sk_perm+0x30f/0xaa0 [ 1660.976926][T12089] ? __fget_files+0x28c/0x470 [ 1660.981619][T12089] ? aa_af_perm+0x230/0x230 [ 1660.986130][T12089] ? __sys_setsockopt+0x51b/0x6a0 [ 1660.991179][T12089] __sys_setsockopt+0x55e/0x6a0 [ 1660.996081][T12089] ? __ia32_sys_recv+0x100/0x100 [ 1661.001034][T12089] ? lock_downgrade+0x6e0/0x6e0 [ 1661.005904][T12089] ? lock_downgrade+0x6e0/0x6e0 [ 1661.010770][T12089] __x64_sys_setsockopt+0xba/0x150 [ 1661.015901][T12089] ? syscall_enter_from_user_mode+0x21/0x70 [ 1661.021834][T12089] do_syscall_64+0x35/0xb0 [ 1661.026255][T12089] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1661.032146][T12089] RIP: 0033:0x7fe6c8d37059 [ 1661.036609][T12089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1661.056237][T12089] RSP: 002b:00007fe6c7cac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1661.064650][T12089] RAX: ffffffffffffffda RBX: 00007fe6c8e49f60 RCX: 00007fe6c8d37059 [ 1661.072706][T12089] RDX: 0000000000000049 RSI: 0000000000000001 RDI: 0000000000000003 [ 1661.080670][T12089] RBP: 00007fe6c8d9108d R08: 0000000000000010 R09: 0000000000000000 [ 1661.088654][T12089] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000000 [ 1661.096640][T12089] R13: 00007fff19ce9f2f R14: 00007fe6c7cac300 R15: 0000000000022000 [ 1661.104703][T12089] 05:36:19 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) 05:36:19 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x801c581f, &(0x7f0000000180)={'vxcan0\x00'}) 05:36:19 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x401c5820, &(0x7f0000000180)={'vxcan0\x00'}) [ 1661.107712][T12089] Modules linked in: [ 1661.167372][T12089] ---[ end trace 0000000000000000 ]--- [ 1661.172938][T12089] RIP: 0010:sock_setsockopt+0x853/0x2d70 [ 1661.179386][T12089] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 2a 22 00 00 48 8b 83 20 01 00 00 ba ff ff 37 00 48 c1 e2 2a 48 8d 78 08 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 ed 21 00 00 48 8b 40 08 48 8b b5 90 fe ff ff 48 [ 1661.200222][T12089] RSP: 0018:ffffc90013267c70 EFLAGS: 00010202 [ 1661.206596][T12089] RAX: 0000000000000000 RBX: ffffffff8c414300 RCX: 0000000000000001 [ 1661.214624][T12089] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1661.224174][T12089] RBP: ffffc90013267de8 R08: 0000000000000001 R09: ffffffff904d8387 [ 1661.232369][T12089] R10: fffffbfff209b070 R11: 0000000000000000 R12: ffff88807d299234 [ 1661.240805][T12089] R13: ffff88807d2994a0 R14: 0000000000000001 R15: ffff88807d299000 [ 1661.248953][T12089] FS: 00007fe6c7cac700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1661.258000][T12089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1661.265100][T12089] CR2: 000000c00094a9c4 CR3: 0000000075232000 CR4: 00000000003506e0 [ 1661.273230][T12089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1661.281314][T12089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1661.289325][T12089] Kernel panic - not syncing: Fatal exception [ 1661.295563][T12089] Kernel Offset: disabled [ 1661.299878][T12089] Rebooting in 86400 seconds..