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", 0x1000, r4}, 0x68) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff8000/0x3000)=nil) 00:22:35 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000200)={0x23, 0x3, 0xbb, 0x40}, 0x10) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000)=0xfffffffe, 0x4) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x6a, 0x8, 0x8}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r2 = accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) connect$phonet_pipe(r2, &(0x7f00000001c0)={0x23, 0x2, 0x6, 0x7f}, 0x10) 00:22:35 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, 'syz0\x00', @default, 0x1000, 0x0, [@default, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) accept$netrom(r1, &(0x7f0000000080)={{0x3, @netrom}, [@rose, @netrom, @rose, @bcast, @null, @netrom, @remote, @null]}, &(0x7f0000000100)=0x48) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x2010, r1, 0x0) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:35 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x40, 0x6, 0x8}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:22:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) 00:22:35 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2, 0x100010, 0xffffffffffffffff, 0x8000000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000580)={0x7, 0x8, 0xfa00, {r2}}, 0x10) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000010c0)={0x12, 0x10, 0xfa00, {&(0x7f0000001080), r2, r0}}, 0x18) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000001140)={0x1, 0x10, 0xfa00, {&(0x7f0000001100), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x0, @loopback}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, r3}}, 0x48) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r3}}, 0x18) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000636000/0x1000)=nil, &(0x7f0000a0c000/0x1000)=nil, &(0x7f0000738000/0x3000)=nil, &(0x7f0000ac8000/0x1000)=nil, &(0x7f0000527000/0x3000)=nil, &(0x7f0000000000)="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", 0x1000, r4}, 0x68) (async) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff8000/0x3000)=nil) 00:22:35 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x8000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, {0xa, 0x4e21, 0x7ff, @mcast2, 0x6f2}, r2, 0x17c}}, 0x48) socket$netlink(0x10, 0x3, 0x0) 00:22:35 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) 00:22:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) close$fd_v4l2_buffer(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000000)={0x6, 0x3, 0x6, 0x2, 0x7, 0x0, 0xfffffffffffffe8a}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) (async) close$fd_v4l2_buffer(r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000000)={0x6, 0x3, 0x6, 0x2, 0x7, 0x0, 0xfffffffffffffe8a}) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) (async) 00:22:35 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x501) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 00:22:35 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x40, 0x6, 0x8}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) [ 1355.477062][ T1731] block nbd1: Unsupported socket: shutdown callout must be supported. 00:22:35 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) 00:22:35 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000200)={0x23, 0x3, 0xbb, 0x40}, 0x10) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000)=0xfffffffe, 0x4) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x6a, 0x8, 0x8}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r2 = accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) connect$phonet_pipe(r2, &(0x7f00000001c0)={0x23, 0x2, 0x6, 0x7f}, 0x10) 00:22:35 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000200)={0x23, 0x3, 0xbb, 0x40}, 0x10) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) (async) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000)=0xfffffffe, 0x4) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x6a, 0x8, 0x8}, 0x10) (async) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x6a, 0x8, 0x8}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r2 = accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) connect$phonet_pipe(r2, &(0x7f00000001c0)={0x23, 0x2, 0x6, 0x7f}, 0x10) (async) connect$phonet_pipe(r2, &(0x7f00000001c0)={0x23, 0x2, 0x6, 0x7f}, 0x10) 00:22:35 executing program 1: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x4000)=nil) 00:22:35 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x4, 0x6}, 0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x0, 0x1}, 0x10) 00:22:35 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xffffffff, 0x450001) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000000)=0x39) 00:22:35 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x501) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 00:22:35 executing program 0: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x4000)=nil) 00:22:35 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x8, 0x2, 0x5}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x8000000) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, {0xa, 0x4e21, 0x7ff, @mcast2, 0x6f2}, r2, 0x17c}}, 0x48) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) 00:22:35 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xffffffff, 0x450001) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000000)=0x39) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0xffffffff, 0x450001) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000000)=0x39) (async) 00:22:35 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ff7000/0x3000)=nil) 00:22:35 executing program 3: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80000) r1 = accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) r2 = accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000000)={0x23, 0x7f, 0x55, 0xc4}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f00000001c0)={0x23, 0xbe, 0x10, 0x8f}, 0x10) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000200)=0x1, 0x4) 00:22:35 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x4, 0x6}, 0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x0, 0x1}, 0x10) 00:22:35 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x4, 0x6}, 0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x0, 0x1}, 0x10) (rerun: 32) 00:22:35 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ff7000/0x3000)=nil) 00:22:35 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x8, 0x2, 0x5}, 0x10) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:35 executing program 2: r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80000) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) (async) r1 = accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) r2 = accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000000)={0x23, 0x7f, 0x55, 0xc4}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f00000001c0)={0x23, 0xbe, 0x10, 0x8f}, 0x10) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000200)=0x1, 0x4) 00:22:35 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x309c80) close$fd_v4l2_buffer(r0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ff8000/0x2000)=nil, 0x2000}}) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x80010, r0, 0x0) mmap$usbfs(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0xf0e) 00:22:35 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000), 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:22:35 executing program 4: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x309c80) close$fd_v4l2_buffer(r0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ff8000/0x2000)=nil, 0x2000}}) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x80010, r0, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x80010, r0, 0x0) mmap$usbfs(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0xf0e) 00:22:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1f0, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1dc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc5, 0x5, "ce12fec366239502455dfa5f10e3ce68246695716197e6488df7e1159d21ef892b379072a9de0933ad7fa5fdeac62c8f1b6f09b1c933e304f977dd350d3d38a9b22e0de17b5e483169de1ffdafd80118761b9cd33b6f268f11dd9719c9b4b0a3cf5271e19bd2062d21290f931f4227f0034f40ddb3eb0b644ebeb877e4239b31470f687957d199239b329ed54f73975940cbe5eaea0dc658097f63bd4486ed7c2a6180d0091ba13c39f1aff37bb0850e9e37c231b92c23717b7fb152d0a9debc11"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff85}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%{$@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x38, 0x5, "ff7de2a6008fdcf304cb225ebae5125f7615122dd9c174b6c0f6506ce84102c3ef7893d50fb81ef49ec06cd2b4dc84820853c7fa"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb75}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'\x91#-\x11\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4001}, 0x14) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:22:35 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:35 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x4f, 0x1f, 0x81}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0xb54, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:35 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000), 0x0) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:22:35 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 00:22:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1f0, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1dc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc5, 0x5, "ce12fec366239502455dfa5f10e3ce68246695716197e6488df7e1159d21ef892b379072a9de0933ad7fa5fdeac62c8f1b6f09b1c933e304f977dd350d3d38a9b22e0de17b5e483169de1ffdafd80118761b9cd33b6f268f11dd9719c9b4b0a3cf5271e19bd2062d21290f931f4227f0034f40ddb3eb0b644ebeb877e4239b31470f687957d199239b329ed54f73975940cbe5eaea0dc658097f63bd4486ed7c2a6180d0091ba13c39f1aff37bb0850e9e37c231b92c23717b7fb152d0a9debc11"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff85}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%{$@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x38, 0x5, "ff7de2a6008fdcf304cb225ebae5125f7615122dd9c174b6c0f6506ce84102c3ef7893d50fb81ef49ec06cd2b4dc84820853c7fa"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb75}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'\x91#-\x11\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4001}, 0x14) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1f0, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1dc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc5, 0x5, "ce12fec366239502455dfa5f10e3ce68246695716197e6488df7e1159d21ef892b379072a9de0933ad7fa5fdeac62c8f1b6f09b1c933e304f977dd350d3d38a9b22e0de17b5e483169de1ffdafd80118761b9cd33b6f268f11dd9719c9b4b0a3cf5271e19bd2062d21290f931f4227f0034f40ddb3eb0b644ebeb877e4239b31470f687957d199239b329ed54f73975940cbe5eaea0dc658097f63bd4486ed7c2a6180d0091ba13c39f1aff37bb0850e9e37c231b92c23717b7fb152d0a9debc11"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff85}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%{$@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x38, 0x5, "ff7de2a6008fdcf304cb225ebae5125f7615122dd9c174b6c0f6506ce84102c3ef7893d50fb81ef49ec06cd2b4dc84820853c7fa"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb75}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'\x91#-\x11\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4001}, 0x14) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) 00:22:35 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:35 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, &(0x7f0000000040)) 00:22:35 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) 00:22:36 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x4f, 0x1f, 0x81}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0xb54, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x4f, 0x1f, 0x81}, 0x10) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0xb54, 0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) 00:22:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc) 00:22:36 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) (async) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, &(0x7f0000000040)) 00:22:36 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x492583) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0xfffffc00, 0x8, 0x4, 0x10, 0x3, {0x77359400}, {0x1, 0x8, 0x80, 0x3, 0x1, 0x1, "5173ed09"}, 0x209, 0x4, {}, 0x4f6fe9f7, 0x0, r1}) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2, 0x30, r1, 0x8000000) 00:22:36 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000), 0x1800) accept4$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0xf6e5cd56e46040a1) accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) 00:22:36 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc) 00:22:36 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000140)=0x4) socketpair(0x9, 0x0, 0x3ff, &(0x7f0000000100)) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:22:36 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x492583) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0xfffffc00, 0x8, 0x4, 0x10, 0x3, {0x77359400}, {0x1, 0x8, 0x80, 0x3, 0x1, 0x1, "5173ed09"}, 0x209, 0x4, {}, 0x4f6fe9f7, 0x0, r1}) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2, 0x30, r1, 0x8000000) 00:22:36 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000), 0x1800) accept4$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0xf6e5cd56e46040a1) (async) accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) 00:22:36 executing program 0: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x110, r1, 0x0) 00:22:36 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) mlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$qrtrtun(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000000, 0xd15d2d7490574ada, r0, 0x2) 00:22:36 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:36 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000140)=0x4) socketpair(0x9, 0x0, 0x3ff, &(0x7f0000000100)) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:22:36 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 00:22:36 executing program 2: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x110, r1, 0x0) 00:22:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:22:36 executing program 4: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) mlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$qrtrtun(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000000, 0xd15d2d7490574ada, r0, 0x2) 00:22:36 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 00:22:36 executing program 0: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@remote, @null, @netrom, @null]}, &(0x7f0000000080)=0x48) accept4$netrom(r0, &(0x7f00000000c0)={{0x3, @null}, [@rose, @null, @null, @default, @remote, @bcast, @bcast]}, &(0x7f0000000140)=0x48, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 00:22:36 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 00:22:36 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:36 executing program 3: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ff8000/0x3000)=nil) 00:22:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:22:36 executing program 3: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@remote, @null, @netrom, @null]}, &(0x7f0000000080)=0x48) accept4$netrom(r0, &(0x7f00000000c0)={{0x3, @null}, [@rose, @null, @null, @default, @remote, @bcast, @bcast]}, &(0x7f0000000140)=0x48, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 00:22:36 executing program 0: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ff8000/0x3000)=nil) 00:22:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0xfffffefc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:22:36 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:36 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) 00:22:36 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:22:36 executing program 1: io_uring_setup(0x3aed, &(0x7f0000000000)={0x0, 0xb0a3, 0x97917b5f75ed926f, 0x1, 0x8000009b}) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:22:36 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:22:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x7) (async) r1 = socket$netlink(0x10, 0x3, 0x7) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0xfffffefc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:22:36 executing program 2: io_uring_setup(0x3aed, &(0x7f0000000000)={0x0, 0xb0a3, 0x97917b5f75ed926f, 0x1, 0x8000009b}) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:22:36 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x1, 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:36 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:22:36 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:22:36 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x10100) mmap$usbfs(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x110, r0, 0x3) 00:22:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x3315, 0x4) 00:22:36 executing program 4: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x10100) mmap$usbfs(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x110, r0, 0x3) 00:22:36 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:36 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) 00:22:36 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x1, 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:36 executing program 1: bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x51d, 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:22:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x3315, 0x4) 00:22:37 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) remap_file_pages(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x100000c, 0x7f, 0x20000) 00:22:37 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async, rerun: 64) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (rerun: 64) 00:22:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0x3, 0x0, 0x0) 00:22:37 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) 00:22:37 executing program 2: bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x51d, 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:22:37 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) remap_file_pages(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x100000c, 0x7f, 0x20000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) remap_file_pages(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x100000c, 0x7f, 0x20000) (async) 00:22:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 00:22:37 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x5, 0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:22:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0x4, 0x0, 0x0) 00:22:37 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = userfaultfd(0x40000) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000000)="429106c0fa3bae8607047b59a0c95f12f570799cc69dc088f52f699f85c06aafe5f0bba3bc8a4a52cc6f7717a2f9d157b6b03e8028b07e9dabfdc834017d71b21fa97dfe66aa62a7310262cacbc5a9fca2e721cf948cdc5e641d75cbf5a83f83adb716481b2925bd6d055bd8b2ff2b7933e1298ece507b945276de034c8df1ae1a3c1bd57ad0a6cf45ecf2f6008e39bb2c838f6f91ac5c151fc0dec7e5872ea4", 0xa0, r1}, 0x68) 00:22:37 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x11, 0x9}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x7f, 0x54, 0x5}, 0x10) 00:22:37 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa0c2, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:22:37 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000100), 0xc00) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x2) 00:22:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 00:22:37 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = userfaultfd(0x40000) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000000)="429106c0fa3bae8607047b59a0c95f12f570799cc69dc088f52f699f85c06aafe5f0bba3bc8a4a52cc6f7717a2f9d157b6b03e8028b07e9dabfdc834017d71b21fa97dfe66aa62a7310262cacbc5a9fca2e721cf948cdc5e641d75cbf5a83f83adb716481b2925bd6d055bd8b2ff2b7933e1298ece507b945276de034c8df1ae1a3c1bd57ad0a6cf45ecf2f6008e39bb2c838f6f91ac5c151fc0dec7e5872ea4", 0xa0, r1}, 0x68) 00:22:37 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, 0x0, 0x0) bind$netrom(r0, &(0x7f0000000500)={{0x3, @default, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) socketpair(0x1, 0x4, 0xff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x4, 0x8, 0xb, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x20, 0x4e, 0x3, 0xe5}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x7f, 0xc9, 0x15, @empty, @private2, 0x7, 0x8000, 0xa5c, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x1f, 0x92, 0x40, @mcast1, @local, 0x8, 0x40, 0x4, 0xd7}}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x3f, 0x7, 0x4, 0x71, @mcast1, @remote, 0x80, 0x0, 0x1e, 0x5}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r4, @ANYBLOB="10002dbd7000fddbdf25130000001c000180080003000300000008000100", @ANYRES32=r5, @ANYBLOB="06e7ffffeaf5cdaaf7ce4cf4e30571b313861ab7a261be2816ca4dce04c5c2bd1bd6e905c348a0f1affb2bbf40153ef6cec518a2bcdd5783c4bebdc0a61af8a70afd4a73a60833cf800abecb646ad457db664ce388002b6f16a2f3a827c42ebe75", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="140002000000000000000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="140002fa67726574010100"/24, @ANYRES32=r9, @ANYBLOB="08000100cfef98ae620297eaf1502f9730c50209cec21e86a13791afc4638e773d148182bf59a074507768c03ffeef12611297b1ed4cbe4b5b53d6af12b9108ab29ee1adcfd8678ff81cbc53cdb7ce99d584aeec9943eae263c264cd3f7962a83c8d3a06e646410080feaaca4301dbf80acc7729e0efc2accbbd10a69890952a25feaedb915b3e0d93a1eb0126622dcffad18f40e6d45779cba95a16b7a6a9570015f0704c249a03d21082ed6d714ba3bdf1e5aa77ca56a11285b1091e09f806fab9f5228fe96b4f8cc55bf5adfa3b12cfe8e75f361287ea28afa1bf3e3ab61f39538a626e8d60af91c10c8759a7541ed2e67c57d2e95e511697b9", @ANYRES32=r10, @ANYBLOB="2000018008000300020000001400020076657468305f746f5f68737200000000"], 0x9c}, 0x1, 0x0, 0x0, 0x640d0}, 0x4811) 00:22:37 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x5, 0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:22:37 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x11, 0x9}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x7f, 0x54, 0x5}, 0x10) 00:22:37 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa0c2, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:22:37 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1265) ioctl$NBD_CLEAR_QUE(r0, 0xab05) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff8000/0x3000)=nil) 00:22:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, 0x0, 0x0) (async) bind$netrom(r0, &(0x7f0000000500)={{0x3, @default, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) (async) socketpair(0x1, 0x4, 0xff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x4, 0x8, 0xb, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x20, 0x4e, 0x3, 0xe5}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x7f, 0xc9, 0x15, @empty, @private2, 0x7, 0x8000, 0xa5c, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x1f, 0x92, 0x40, @mcast1, @local, 0x8, 0x40, 0x4, 0xd7}}) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x3f, 0x7, 0x4, 0x71, @mcast1, @remote, 0x80, 0x0, 0x1e, 0x5}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r4, @ANYBLOB="10002dbd7000fddbdf25130000001c000180080003000300000008000100", @ANYRES32=r5, @ANYBLOB="06e7ffffeaf5cdaaf7ce4cf4e30571b313861ab7a261be2816ca4dce04c5c2bd1bd6e905c348a0f1affb2bbf40153ef6cec518a2bcdd5783c4bebdc0a61af8a70afd4a73a60833cf800abecb646ad457db664ce388002b6f16a2f3a827c42ebe75", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="140002000000000000000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="140002fa67726574010100"/24, @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="2000018008000300020000001400020076657468305f746f5f68737200000000"], 0x9c}, 0x1, 0x0, 0x0, 0x640d0}, 0x4811) 00:22:37 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async, rerun: 64) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async, rerun: 64) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000100), 0xc00) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x2) (rerun: 64) 00:22:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x1265) (async) ioctl$NBD_CLEAR_QUE(r0, 0xab05) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff8000/0x3000)=nil) 00:22:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x52100, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) 00:22:37 executing program 4: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@loopback, 0x1, 0x0, 0x50, 0x0, [{}, {@multicast1}, {@loopback}, {@private}, {}]}}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:22:37 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x180000000) socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x80010, r0, 0x180000000) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff7000/0x2000)=nil) mlock(&(0x7f0000ff0000/0x4000)=nil, 0x4000) 00:22:37 executing program 3: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:37 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x52100, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x52100, 0x0) (async) ioctl$RTC_WIE_OFF(r0, 0x7010) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040), &(0x7f00000000c0)) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) (async) 00:22:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0x5, 0x0, 0x0) 00:22:37 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x7, 0x9, 0x7}, 0x15) 00:22:37 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x0, 0x11, r0, 0x0) (async) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x180000000) socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x80010, r0, 0x180000000) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff7000/0x2000)=nil) (async) mlock(&(0x7f0000ff0000/0x4000)=nil, 0x4000) 00:22:37 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0xa480, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x1d, 0x1d, 0x6, 0x12, 0x1, 0xff, 0x0, 0xa0}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:37 executing program 1: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@loopback, 0x1, 0x0, 0x50, 0x0, [{}, {@multicast1}, {@loopback}, {@private}, {}]}}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@loopback, 0x1, 0x0, 0x50, 0x0, [{}, {@multicast1}, {@loopback}, {@private}, {}]}}) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) 00:22:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x39, 0x8800) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x80000001, 0x0, 0x10001}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) 00:22:37 executing program 0: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 00:22:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x39, 0x8800) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x80000001, 0x0, 0x10001}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) 00:22:37 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x7, 0x9, 0x7}, 0x15) 00:22:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0xa480, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x1d, 0x1d, 0x6, 0x12, 0x1, 0xff, 0x0, 0xa0}) (async) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x1d, 0x1d, 0x6, 0x12, 0x1, 0xff, 0x0, 0xa0}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 00:22:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xa, 0x0, &(0x7f0000000200)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/18, 0x12, 0x1, &(0x7f00000000c0)=""/253, 0xfd}, &(0x7f0000000200)=0x40) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0xea880, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0xef000) r2 = socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc) 00:22:37 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xfffffffffffffdf7) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x1000) 00:22:37 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1, 0x40, 0xcf}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x1, 0x40, 0x4}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:37 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:22:37 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000040)=0xfffffffffffffd88) 00:22:37 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) 00:22:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xa, 0x0, &(0x7f0000000200)) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xa, 0x0, &(0x7f0000000200)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/18, 0x12, 0x1, &(0x7f00000000c0)=""/253, 0xfd}, &(0x7f0000000200)=0x40) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/18, 0x12, 0x1, &(0x7f00000000c0)=""/253, 0xfd}, &(0x7f0000000200)=0x40) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0xea880, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0xef000) r2 = socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc) 00:22:37 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) (async) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:22:37 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xfffffffffffffdf7) (async) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x1000) 00:22:37 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1, 0x40, 0xcf}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1, 0x40, 0xcf}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x1, 0x40, 0x4}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:37 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) (async) 00:22:37 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000040)=0xfffffffffffffd88) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000040)=0xfffffffffffffd88) (async) 00:22:37 executing program 0: socket$netlink(0x10, 0x3, 0x0) 00:22:37 executing program 2: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x2000)=nil) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 00:22:37 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:22:37 executing program 2: socket$netlink(0x10, 0x3, 0x0) 00:22:37 executing program 2: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x2000)=nil) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x2000)=nil) (async) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async) 00:22:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fbdbdf25130000000c00018008000100", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00s'], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1000, 0x4) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc) 00:22:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0x8, 0x0, 0x0) 00:22:37 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x3, 0xfc}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:37 executing program 0: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) 00:22:37 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:22:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fbdbdf25130000000c00018008000100", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00s'], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1000, 0x4) (async, rerun: 64) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc) (async, rerun: 64) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc) 00:22:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:22:37 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x800) syz_open_dev$vcsa(&(0x7f0000000480), 0x6569, 0x6001) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x0) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000040)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000340)=0x257d1933, 0x4) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000540), 0x4) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000240)=0x1, 0x4) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x3, 0x204080) accept$netrom(r3, &(0x7f0000000100)={{0x3, @default}, [@bcast, @netrom, @netrom, @rose, @bcast, @netrom, @bcast, @default]}, &(0x7f0000000180)=0x48) socketpair(0x1, 0x6, 0x800, &(0x7f0000000280)) r4 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000300), 0x4) 00:22:37 executing program 4: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) 00:22:37 executing program 2: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4) r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x8, 0x4) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@remote, @default, @netrom, @netrom, @default, @remote, @null, @null]}, &(0x7f0000000180)=0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x17, 0x4) 00:22:37 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x3, 0xfc}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:38 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x3, 0xfc}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x3, 0xfc}, 0x10) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) 00:22:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:22:38 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/53, 0x35, 0x1, &(0x7f0000000040)=""/59, 0x3b}, &(0x7f00000000c0)=0x40) 00:22:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40086602, &(0x7f0000000640)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180)="3439c9fdc47b21b766b8daae959dd47dffcb382cb95dcdc0af34475a9800cd97b6cb0937819083b87e6bc729c299708b3537051210199acf486ec19ec64a2885fb78785be9ea98c54892eeb1263ce5c8bcfde320e72c2ca0824e322199fba303871ac1ea69abe71bfa01ffe5bbe230abd424a4dc9a9d2d8f973ffe111f10a3e42dee87861a41eee089833eea000fded96e594428784fad77f78228f754dd7dcd88", 0xa1, r0}, 0x68) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0xc0000) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:22:38 executing program 2: getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4) (async) r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x8, 0x4) (async) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@remote, @default, @netrom, @netrom, @default, @remote, @null, @null]}, &(0x7f0000000180)=0x48) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x17, 0x4) 00:22:38 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/53, 0x35, 0x1, &(0x7f0000000040)=""/59, 0x3b}, &(0x7f00000000c0)=0x40) 00:22:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:22:38 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x8001, 0x4) r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:22:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xb, 0x0, 0x0) 00:22:38 executing program 0: socketpair(0x3, 0x2, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0xffff, 'syz1\x00', @default, 0x8001, 0x1, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r1 = socket$netlink(0x10, 0x3, 0x19) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r2 = userfaultfd(0x80800) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000fe9000/0x12000)=nil, &(0x7f0000fed000/0x2000)=nil, 0x12000, 0x1}) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000040)=""/7, &(0x7f0000000080)=0x7) 00:22:38 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) r2 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000080), 0x800) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000140), 0x4) 00:22:38 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x800) syz_open_dev$vcsa(&(0x7f0000000480), 0x6569, 0x6001) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x0) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000040)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000340)=0x257d1933, 0x4) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000540), 0x4) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000240)=0x1, 0x4) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x3, 0x204080) accept$netrom(r3, &(0x7f0000000100)={{0x3, @default}, [@bcast, @netrom, @netrom, @rose, @bcast, @netrom, @bcast, @default]}, &(0x7f0000000180)=0x48) socketpair(0x1, 0x6, 0x800, &(0x7f0000000280)) r4 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000300), 0x4) 00:22:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x88, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x844}, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, 0x0, 0x0) 00:22:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40086602, &(0x7f0000000640)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180)="3439c9fdc47b21b766b8daae959dd47dffcb382cb95dcdc0af34475a9800cd97b6cb0937819083b87e6bc729c299708b3537051210199acf486ec19ec64a2885fb78785be9ea98c54892eeb1263ce5c8bcfde320e72c2ca0824e322199fba303871ac1ea69abe71bfa01ffe5bbe230abd424a4dc9a9d2d8f973ffe111f10a3e42dee87861a41eee089833eea000fded96e594428784fad77f78228f754dd7dcd88", 0xa1, r0}, 0x68) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0xc0000) (async) r2 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0xc0000) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:22:38 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x800) syz_open_dev$vcsa(&(0x7f0000000480), 0x6569, 0x6001) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) accept4$phonet_pipe(r0, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x0) (async) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000040)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), 0x4) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000340)=0x257d1933, 0x4) (async) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000540), 0x4) (async) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000240)=0x1, 0x4) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x3, 0x204080) accept$netrom(r3, &(0x7f0000000100)={{0x3, @default}, [@bcast, @netrom, @netrom, @rose, @bcast, @netrom, @bcast, @default]}, &(0x7f0000000180)=0x48) socketpair(0x1, 0x6, 0x800, &(0x7f0000000280)) (async) r4 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000300), 0x4) 00:22:38 executing program 3: socketpair(0x3, 0x2, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0xffff, 'syz1\x00', @default, 0x8001, 0x1, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r1 = socket$netlink(0x10, 0x3, 0x19) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r2 = userfaultfd(0x80800) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000fe9000/0x12000)=nil, &(0x7f0000fed000/0x2000)=nil, 0x12000, 0x1}) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000040)=""/7, &(0x7f0000000080)=0x7) socketpair(0x3, 0x2, 0x8, &(0x7f00000000c0)) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0xffff, 'syz1\x00', @default, 0x8001, 0x1, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) (async) socket$netlink(0x10, 0x3, 0x19) (async) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) userfaultfd(0x80800) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000fe9000/0x12000)=nil, &(0x7f0000fed000/0x2000)=nil, 0x12000, 0x1}) (async) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000040)=""/7, &(0x7f0000000080)=0x7) (async) 00:22:38 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x8001, 0x4) r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x8001, 0x4) (async) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) 00:22:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x88, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x844}, 0x4) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, 0x0, 0x0) 00:22:38 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0xfffffffffffffcb6) 00:22:38 executing program 4: r0 = io_uring_setup(0x505f, &(0x7f00000001c0)={0x0, 0x1690, 0x2000, 0x0, 0x2cc}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x8010, r0, 0x8000000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='memory.high\x00', 0x2, 0x0) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0xa94c0, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='memory.swap.high\x00', 0x2, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f00000000c0)={0x0, 0x8, 0x4}) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000040)={0xb76, 0x0, 0x3}) 00:22:38 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getitimer(0x2, &(0x7f0000000000)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:22:38 executing program 2: r0 = io_uring_setup(0x505f, &(0x7f00000001c0)={0x0, 0x1690, 0x2000, 0x0, 0x2cc}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x8010, r0, 0x8000000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='memory.high\x00', 0x2, 0x0) (async) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0xa94c0, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000180)='memory.swap.high\x00', 0x2, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f00000000c0)={0x0, 0x8, 0x4}) (async) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000040)={0xb76, 0x0, 0x3}) 00:22:38 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x80002) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0xc) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x80010, r1, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000008, 0x810, r0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000380)}}, 0x18) accept4$phonet_pipe(r2, 0x0, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, &(0x7f0000000200)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000005c0)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x2, r4, 0x0, 0x1, @in6={0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}}, 0xa0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {r6, 0x20}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000002e80)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x90) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{}, {}, {}], r8, 0x1, 0x1, 0xd8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r8}}, 0x18) 00:22:38 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:22:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xc, 0x0, 0x0) 00:22:38 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getitimer(0x2, &(0x7f0000000000)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getitimer(0x2, &(0x7f0000000000)) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:22:38 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0xfffffffffffffcb6) socket$phonet_pipe(0x23, 0x5, 0x2) (async) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0xfffffffffffffcb6) (async) 00:22:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x100, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:22:38 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mmap$dsp(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x2000001, 0x11, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 00:22:38 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:22:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x3) 00:22:38 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x80002) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0xc) (async) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x80010, r1, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000008, 0x810, r0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000380)}}, 0x18) (async) accept4$phonet_pipe(r2, 0x0, 0x0, 0x0) (async) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000005c0)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x2, r4, 0x0, 0x1, @in6={0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}}, 0xa0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {r6, 0x20}}, 0x10) (async) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000002e80)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x90) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{}, {}, {}], r8, 0x1, 0x1, 0xd8}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r8}}, 0x18) 00:22:38 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 00:22:38 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mmap$dsp(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x2000001, 0x11, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 00:22:38 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mmap$dsp(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x2000001, 0x11, 0xffffffffffffffff, 0x0) (async) mlock2(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 00:22:38 executing program 1: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0xb7b3b54df6522d3c, r0, 0x7f) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:38 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000000c0)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x11, 0x18, 0x11, 0x13, 0x9, 0x1, 0x0, 0x169, 0x1}}) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000100)={0x7eb4, 0x2, 0x0, 0x7dce, 0x3b1, 0xffff, 0x6}) r2 = accept$phonet_pipe(r1, 0x0, &(0x7f0000000000)) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000040), 0x80000) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:22:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x100, 0x4) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:22:38 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x7b) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x7f, 0x0, 0x20}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffffffffffff, 0x200082) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 00:22:38 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) 00:22:38 executing program 3: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0xb7b3b54df6522d3c, r0, 0x7f) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:38 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 00:22:38 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 00:22:38 executing program 3: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0xb7b3b54df6522d3c, r0, 0x7f) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:38 executing program 4: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0xb7b3b54df6522d3c, r0, 0x7f) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000000c0)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x11, 0x18, 0x11, 0x13, 0x9, 0x1, 0x0, 0x169, 0x1}}) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000100)={0x7eb4, 0x2, 0x0, 0x7dce, 0x3b1, 0xffff, 0x6}) r2 = accept$phonet_pipe(r1, 0x0, &(0x7f0000000000)) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000040), 0x80000) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000000c0)) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x11, 0x18, 0x11, 0x13, 0x9, 0x1, 0x0, 0x169, 0x1}}) (async) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000100)={0x7eb4, 0x2, 0x0, 0x7dce, 0x3b1, 0xffff, 0x6}) (async) accept$phonet_pipe(r1, 0x0, &(0x7f0000000000)) (async) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000040), 0x80000) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) 00:22:38 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) 00:22:38 executing program 4: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000100)={'binder1\x00'}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, r1, 0x0, 0x0, 0x1}}, 0x20) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:22:38 executing program 0: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0xb7b3b54df6522d3c, r0, 0x7f) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:38 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x7b) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x7f, 0x0, 0x20}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffffffffffff, 0x200082) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffffffffffff, 0x200082) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 00:22:38 executing program 3: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000100)={'binder1\x00'}) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) (async, rerun: 32) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, r1, 0x0, 0x0, 0x1}}, 0x20) (rerun: 32) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:22:38 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1e2b) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:22:38 executing program 1: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0xb7b3b54df6522d3c, r0, 0x7f) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:38 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:38 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:38 executing program 3: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0xb7b3b54df6522d3c, r0, 0x7f) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x10000, 0x902) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x100000000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x310, 0x2000) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 00:22:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) close$fd_v4l2_buffer(r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:22:39 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1e2b) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:22:39 executing program 2: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0xb7b3b54df6522d3c, r0, 0x7f) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 4: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0xb7b3b54df6522d3c, r0, 0x7f) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x10000, 0x902) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x100000000) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x310, 0x2000) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r0, 0x0) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 00:22:39 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:39 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) close$fd_v4l2_buffer(r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:22:39 executing program 1: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), 0x4) 00:22:39 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:39 executing program 2: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 4: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) 00:22:39 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0xbc3, 0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:22:39 executing program 0: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), 0x4) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), 0x4) 00:22:39 executing program 0: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) 00:22:39 executing program 2: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0xbc3, 0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:22:39 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xff, 0x80, 0x38}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x0, 0x6, 0x3f}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x1, 0x6f, 0xa8}, 0x10) 00:22:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8001, 0x189001) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x1) accept$phonet_pipe(r0, 0x0, &(0x7f0000000100)) socketpair(0x1d, 0x6, 0x4, &(0x7f00000000c0)) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x2) 00:22:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:22:39 executing program 4: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f00000000c0)=0x1d) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 00:22:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) [ 1359.490690][ T2333] can: request_module (can-proto-4) failed. 00:22:39 executing program 4: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 2: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f00000000c0)=0x1d) (async) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 00:22:39 executing program 3: prctl$PR_SET_MM(0x23, 0xc742389a7f29b590, &(0x7f0000ff8000/0x3000)=nil) 00:22:39 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080)=0x1, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xff, 0x80, 0x38}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x0, 0x6, 0x3f}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x1, 0x6f, 0xa8}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xff, 0x80, 0x38}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x0, 0x6, 0x3f}, 0x10) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x1, 0x6f, 0xa8}, 0x10) (async) 00:22:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:22:39 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 00:22:39 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8001, 0x189001) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x1) accept$phonet_pipe(r0, 0x0, &(0x7f0000000100)) socketpair(0x1d, 0x6, 0x4, &(0x7f00000000c0)) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x2) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x8001, 0x189001) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x1) (async) accept$phonet_pipe(r0, 0x0, &(0x7f0000000100)) (async) socketpair(0x1d, 0x6, 0x4, &(0x7f00000000c0)) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x2) (async) 00:22:39 executing program 2: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 1: prctl$PR_SET_MM(0x23, 0xc742389a7f29b590, &(0x7f0000ff8000/0x3000)=nil) [ 1359.649595][ T2363] can: request_module (can-proto-4) failed. [ 1359.657697][ T2363] can: request_module (can-proto-4) failed. 00:22:39 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) (async) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080)=0x1, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:39 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x8000000) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff8000/0x3000)=nil) 00:22:39 executing program 3: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 00:22:39 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x8000, 0x4) 00:22:39 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x8000000) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff8000/0x3000)=nil) 00:22:39 executing program 0: mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:39 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x5, 0x4) r1 = accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:22:39 executing program 3: syz_open_dev$usbfs(0x0, 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r0, 0x0, &(0x7f0000000040)) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000080)=0x5c) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 00:22:39 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80000000, 0x8000) mmap$usbfs(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) 00:22:39 executing program 2: syz_open_dev$usbfs(0x0, 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x8000, 0x4) 00:22:39 executing program 4: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80000000, 0x8000) mmap$usbfs(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x80000000, 0x8000) (async) mmap$usbfs(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) (async) 00:22:39 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x5, 0x4) r1 = accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x5, 0x4) (async) accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) (async) 00:22:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r0, 0x0, &(0x7f0000000040)) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000080)=0x5c) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) accept$phonet_pipe(r0, 0x0, &(0x7f0000000040)) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000080)=0x5c) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) 00:22:39 executing program 2: mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:22:39 executing program 4: syz_open_dev$usbfs(0x0, 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x39d}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2ce622322711f830}, 0x4004010) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200028bd7000fbdbdf250700000014001f00fc0000000000000000000000000000010c000f00bd0000000000000008000b0000000000140020002001000000000000000000000000000206001c0000100000"], 0x58}, 0x1, 0x0, 0x0, 0x51}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:22:39 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x4) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28341) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xfffffffffffffb56) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$NBD_DO_IT(r1, 0xab03) connect$phonet_pipe(r3, &(0x7f0000000080)={0x23, 0x80, 0x20}, 0x10) 00:22:40 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:40 executing program 0: syz_open_dev$usbfs(0x0, 0x36, 0x195001) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:40 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0x8c8, 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x8, 0x4, 0xc5}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000100)={0x23, 0x8, 0x90, 0x5}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000140)={0x23, 0x1f, 0x0, 0x2}, 0x10) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000240)=0x1, 0x4) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x7, 0x81, 0x80}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x3, 0x9, 0x8a}, 0x10) [ 1360.072405][ T2424] nbd4: detected capacity change from 0 to 12 00:22:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x39d}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2ce622322711f830}, 0x4004010) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200028bd7000fbdbdf250700000014001f00fc0000000000000000000000000000010c000f00bd0000000000000008000b0000000000140020002001000000000000000000000000000206001c0000100000"], 0x58}, 0x1, 0x0, 0x0, 0x51}, 0x8000) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:22:40 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0)=0x7f, 0x4) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80800) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x2f, 0x81, 0x8b}, 0x10) 00:22:40 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:40 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0xfffffffffffffc86) 00:22:40 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)="01fe02e23ebcbbd13a566dc74a8cae50f6289419265a5e4cb1b50d0ecdf33600c32c32186c3b8bac3e85b7c2a835e7c56c9ebf505c68f4194f5193f86c7819683ff6b8b2eea10db663e9c419ec99833f4cdf823c70683d7f6b47b5062ec69faa6fadde10aebc98c2a45549a9aa6d800c14d7f10fca3d5ee18672d9600fb1ff2310734c3025d18051e7928484d6bb4eb61796addae5bfc8bbe08f83435b1a2c5cf9119c904cafbbce2f49b5ae181a7acda43ee17d8ae13dea0b95889a73f94cd86202107cf44a129f75c633c713c764c7", 0xd0, r0}, 0x68) 00:22:40 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 00:22:40 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0x8c8, 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x8, 0x4, 0xc5}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000100)={0x23, 0x8, 0x90, 0x5}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000140)={0x23, 0x1f, 0x0, 0x2}, 0x10) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000240)=0x1, 0x4) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x7, 0x81, 0x80}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x7, 0x81, 0x80}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x3, 0x9, 0x8a}, 0x10) 00:22:40 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)="01fe02e23ebcbbd13a566dc74a8cae50f6289419265a5e4cb1b50d0ecdf33600c32c32186c3b8bac3e85b7c2a835e7c56c9ebf505c68f4194f5193f86c7819683ff6b8b2eea10db663e9c419ec99833f4cdf823c70683d7f6b47b5062ec69faa6fadde10aebc98c2a45549a9aa6d800c14d7f10fca3d5ee18672d9600fb1ff2310734c3025d18051e7928484d6bb4eb61796addae5bfc8bbe08f83435b1a2c5cf9119c904cafbbce2f49b5ae181a7acda43ee17d8ae13dea0b95889a73f94cd86202107cf44a129f75c633c713c764c7", 0xd0, r0}, 0x68) 00:22:40 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r1}) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0xfffffffffffffc86) 00:22:40 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0)=0x7f, 0x4) (async) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80800) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x2f, 0x81, 0x8b}, 0x10) 00:22:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) 00:22:40 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0xee68, 0x1, 0x0) 00:22:40 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x5, 0x7, 0x4, 0x400, 0xffff, {}, {0x1, 0x0, 0x9, 0x80, 0xae, 0x1c, "c88d0a22"}, 0x5, 0x4, {}, 0x800, 0x0, r1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) 00:22:40 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x244583, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x2010, r1, 0x6c000) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x13, r1, 0x87000) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x2010, r0, 0x19000) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0xf6000) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x7, 0x8001, 0x2}, 0x10) 00:22:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/217, 0xd9, 0x1, &(0x7f0000000100)=""/101, 0x65}, &(0x7f00000001c0)=0x40) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f00000002c0)={0x23, 0x1, 0x0, 0x9}, 0x10) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) socketpair(0xb, 0x5, 0x1, &(0x7f0000000200)={0xffffffffffffffff}) accept$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10) 00:22:40 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0xee68, 0x1, 0x0) 00:22:40 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x244583, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x2010, r1, 0x6c000) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x13, r1, 0x87000) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x2010, r0, 0x19000) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0xf6000) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x7, 0x8001, 0x2}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x244583, 0x0) (async) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x2010, r1, 0x6c000) (async) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x13, r1, 0x87000) (async) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x2010, r0, 0x19000) (async) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0xf6000) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x7, 0x8001, 0x2}, 0x10) (async) 00:22:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x5, 0x7, 0x4, 0x400, 0xffff, {}, {0x1, 0x0, 0x9, 0x80, 0xae, 0x1c, "c88d0a22"}, 0x5, 0x4, {}, 0x800, 0x0, r1}) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) 00:22:40 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:22:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x300) 00:22:40 executing program 3: socket$netlink(0x10, 0x3, 0x6) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff8000/0x3000)=nil) set_mempolicy_home_node(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x3, 0x0) 00:22:40 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/217, 0xd9, 0x1, &(0x7f0000000100)=""/101, 0x65}, &(0x7f00000001c0)=0x40) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f00000002c0)={0x23, 0x1, 0x0, 0x9}, 0x10) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) socketpair(0xb, 0x5, 0x1, &(0x7f0000000200)={0xffffffffffffffff}) accept$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10) (async) accept$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10) 00:22:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:22:40 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 00:22:40 executing program 1: socket$netlink(0x10, 0x3, 0x6) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff8000/0x3000)=nil) set_mempolicy_home_node(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x3, 0x0) 00:22:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:22:40 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:22:40 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) [ 1360.859033][ T6192] block nbd4: Receive control failed (result -104) [ 1367.059259][ T6192] Bluetooth: hci0: command 0x0406 tx timeout 00:23:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x3000000) 00:23:09 executing program 2: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff8000/0x3000)=nil) 00:23:09 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000040)) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x81, 0x40, 0x1}, 0x10) 00:23:10 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 00:23:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) (async, rerun: 64) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (rerun: 64) 00:23:10 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x4) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28341) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x6) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xfffffffffffffb56) (async) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$NBD_DO_IT(r1, 0xab03) connect$phonet_pipe(r3, &(0x7f0000000080)={0x23, 0x80, 0x20}, 0x10) 00:23:10 executing program 3: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff8000/0x3000)=nil) 00:23:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000340)={0x14}, 0x3}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) socketpair(0x15, 0x800, 0x7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x36}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xc2}]}, 0x30}}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, 0x0, 0x0) 00:23:10 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0xa0002) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 00:23:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x94, 0x3f, 0x2}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:10 executing program 3: accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @default, @rose, @bcast, @rose, @null]}, &(0x7f00000000c0)=0x48) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000), 0x80000) accept$phonet_pipe(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10) [ 1390.169400][ T2512] block nbd2: shutting down sockets 00:23:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000340)={0x14}, 0x3}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) socketpair(0x15, 0x800, 0x7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x36}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xc2}]}, 0x30}}, 0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, 0x0, 0x0) 00:23:10 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0xa0002) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 00:23:10 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x4) accept$phonet_pipe(r0, 0x0, &(0x7f0000000080)) 00:23:10 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x2) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) 00:23:10 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x1000)=nil) 00:23:10 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x94, 0x3f, 0x2}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x94, 0x3f, 0x2}, 0x10) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) 00:23:10 executing program 2: accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @default, @rose, @bcast, @rose, @null]}, &(0x7f00000000c0)=0x48) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000), 0x80000) accept$phonet_pipe(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10) 00:23:10 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x2) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x2) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) 00:23:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x4) accept$phonet_pipe(r0, 0x0, &(0x7f0000000080)) 00:23:10 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x1000)=nil) 00:23:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:10 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x3c080, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000080)=0x5) write$capi20(r0, &(0x7f0000000040)={0x10, 0x1, 0xff, 0x80, 0x400, 0x1}, 0x10) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:23:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x300000000000000) 00:23:10 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xc40, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000080)=0x10) 00:23:10 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 00:23:10 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x3c080, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000080)=0x5) write$capi20(r0, &(0x7f0000000040)={0x10, 0x1, 0xff, 0x80, 0x400, 0x1}, 0x10) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x3c080, 0x0) (async) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000080)=0x5) (async) write$capi20(r0, &(0x7f0000000040)={0x10, 0x1, 0xff, 0x80, 0x400, 0x1}, 0x10) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) 00:23:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) [ 1390.399633][ T2564] rtc-efi rtc-efi.0: write status is 3 00:23:10 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000), 0x10) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x5, 0x7, 0x5}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x12, 0x6, 0x5}, 0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x5, 0x4) 00:23:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x6, 0x3, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7, 0x40, 0x6505, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x81, 0x0, 0x14, @rand_addr=' \x01\x00', @loopback, 0x8, 0x10, 0x8, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x8d, 0x5a, 0x200, 0x14, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8000, 0x5, 0x1}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x240, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']+&,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x58, 0x5, "340e869e9edb13e4616b10861343b58577e0b291fdff8c7711498216669a11b52502c04585c713d4218f33f551f496965ce914275b1f8d0fc36480d370b166f81d4e6cadbfed6d0a3f5930644b78ca68d5fef780"}, @ETHTOOL_A_BITSET_VALUE={0x26, 0x4, "5f60b32414d68c7c533207c57e69d1eca14ece5936f666e140eab07bf9ecf0fa0e14"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xd9, 0x5, "8d639b994b4f6563c1f09292961f0923809af168923de22e415753123d983a8a34a2414b1b3dfec0b041c9d9b07323c0e6f84669d69d9eb677c952e01b0803c398f62abc2b9502467d596c759ec96683509e4079bfa19481855724d1eb9f602572fb28bc56df24016847bd367b248eb6f72a0c9a53f218f3b84448afb1bbfa9b031a2f8f5fa0006be4c071a653de04e61623ee2a44ac66cd510928b09285608121ceaa5f7deaacf1c6febef580eb6e94bcbd78e79a698eb9cbfd85acde48147c3357df67a6e57ec29b7126ca68c9a2b2559370a786"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "584142c2fa0a48667df5b0174c1b2325b1f847d4f65b364f0e06109afbdf55f59d63bdd2324a4837d83c11f735240ac31550d11a13d173a6f4dbcb57"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x996921b616cf2461) 00:23:10 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={r2, 0x6}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, 0x10, r0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:23:10 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 00:23:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xc40, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) (async) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000080)=0x10) [ 1390.474549][ T2581] rtc-efi rtc-efi.0: write status is 3 00:23:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x6, 0x3, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7, 0x40, 0x6505, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x81, 0x0, 0x14, @rand_addr=' \x01\x00', @loopback, 0x8, 0x10, 0x8, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x8d, 0x5a, 0x200, 0x14, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8000, 0x5, 0x1}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800400}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x240, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']+&,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x58, 0x5, "340e869e9edb13e4616b10861343b58577e0b291fdff8c7711498216669a11b52502c04585c713d4218f33f551f496965ce914275b1f8d0fc36480d370b166f81d4e6cadbfed6d0a3f5930644b78ca68d5fef780"}, @ETHTOOL_A_BITSET_VALUE={0x26, 0x4, "5f60b32414d68c7c533207c57e69d1eca14ece5936f666e140eab07bf9ecf0fa0e14"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xd9, 0x5, "8d639b994b4f6563c1f09292961f0923809af168923de22e415753123d983a8a34a2414b1b3dfec0b041c9d9b07323c0e6f84669d69d9eb677c952e01b0803c398f62abc2b9502467d596c759ec96683509e4079bfa19481855724d1eb9f602572fb28bc56df24016847bd367b248eb6f72a0c9a53f218f3b84448afb1bbfa9b031a2f8f5fa0006be4c071a653de04e61623ee2a44ac66cd510928b09285608121ceaa5f7deaacf1c6febef580eb6e94bcbd78e79a698eb9cbfd85acde48147c3357df67a6e57ec29b7126ca68c9a2b2559370a786"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "584142c2fa0a48667df5b0174c1b2325b1f847d4f65b364f0e06109afbdf55f59d63bdd2324a4837d83c11f735240ac31550d11a13d173a6f4dbcb57"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x996921b616cf2461) 00:23:10 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={r2, 0x6}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) (async) mmap$dsp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, 0x10, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:23:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0xffffff24) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="24007b2054b7c4753aacb57d11f93d672343cfb39ca329b6d9d5c13458b4ec288cfcdb8f9df562997e3d6b7f06363e39a44f9d3888e9a2875aa01e3dd5278834cb7b9889795b655a685061675b0f0219e08df6c039fb06bcb8d5e5428e9a9da83990635a1b4f05e65bc1dc45080a0f30faa5339ed238853b18ac1b3f9e2ad9f49e9409e6e232507da1ab671a878570a6a1efac86e22d0c12876570", @ANYRES16=0x0, @ANYBLOB="04022cbd7000fcdbdf250700000005000400c40000000500040004000000"], 0x24}, 0x1, 0x0, 0x0, 0xc084}, 0x11) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x2, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x48, 0x5, 0xf5c0, 0x30, @local, @private2, 0x80, 0x7, 0x7f, 0x2}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000001000)={0x438, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x9b, 0x4, "f9721593b5e4baf543fc5998036c58b02515183f240a8821b55b9522330fdf3f3b43e003a4d8b2f957ee3fad2d72d6731347c1edf37858fcc4576197f781684cd6f1dffa93f8a77b32e5b67909d95056ea288d670cb98248003390043fe394e6a1137672f78319a33e8d65a1d9a941901862ac649b643e974a8e17f6ed2c285343005b8fecd615c1b9e59cb60a3651a6ef613203fe4cbf"}, @ETHTOOL_A_BITSET_MASK={0x5f, 0x5, "9d7148aae0368c5ed792490854f1981482832ed8697c149977c3e0b4dca29e0f8fa67083d7a5cfea6b3d16b68ba564b43ffd4cf4b41bf1b35c8d7bebcf1a7cb1156bcf0943296223f5d2b99fc8200b1a4643ebb62304ab93e3701e"}]}, @ETHTOOL_A_FEATURES_WANTED={0x88, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x71, 0x5, "87a0073220a4f9ba955c114358608ead6df3207766a9a2bd97a190af37d2564b5585413c1346dc674e3bb32f21233f535a60ca4ae28472121cb1745fa85a955eff2304243fba540d895bdc04e11efadb4629c0e44e9ad8f1f4a3b71f7e5ba0c36f4d157334e76f702f10833764"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x214, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x12$\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x39ec}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*$-{-.]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xb9{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x84}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\b\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-)\xd3$\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x150, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '-#))/:$/,$*G\xc9)/&\x12)]$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14b}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '![-$](\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '-\xc3/\b{^\',.-#!*,-\x8a\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9de6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x48000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':\\+\\\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xd9\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x648}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5046b25a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4d00}, @ETHTOOL_A_BITSET_MASK={0x18, 0x5, "33ebcc2d87338552315b76c17df34464c4183b0e"}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x438}, 0x1, 0x0, 0x0, 0x805}, 0x800) 00:23:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) r2 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000080), 0x800) (async) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000140), 0x4) 00:23:10 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:23:10 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={0x0}}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) accept4$phonet_pipe(r0, 0x0, &(0x7f00000000c0), 0x80000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) 00:23:10 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 00:23:10 executing program 0: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x3000)=nil) [ 1390.586110][ T1843] block nbd4: Possible stuck request 000000000fceb2a2: control (read@0,4096B). Runtime 30 seconds 00:23:10 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000), 0x10) (async) connect$phonet_pipe(r1, &(0x7f0000000000), 0x10) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x5, 0x7, 0x5}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x12, 0x6, 0x5}, 0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x5, 0x4) 00:23:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0xffffff24) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="24007b2054b7c4753aacb57d11f93d672343cfb39ca329b6d9d5c13458b4ec288cfcdb8f9df562997e3d6b7f06363e39a44f9d3888e9a2875aa01e3dd5278834cb7b9889795b655a685061675b0f0219e08df6c039fb06bcb8d5e5428e9a9da83990635a1b4f05e65bc1dc45080a0f30faa5339ed238853b18ac1b3f9e2ad9f49e9409e6e232507da1ab671a878570a6a1efac86e22d0c12876570", @ANYRES16=0x0, @ANYBLOB="04022cbd7000fcdbdf250700000005000400c40000000500040004000000"], 0x24}, 0x1, 0x0, 0x0, 0xc084}, 0x11) (rerun: 32) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x2, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x48, 0x5, 0xf5c0, 0x30, @local, @private2, 0x80, 0x7, 0x7f, 0x2}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000001000)={0x438, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x9b, 0x4, "f9721593b5e4baf543fc5998036c58b02515183f240a8821b55b9522330fdf3f3b43e003a4d8b2f957ee3fad2d72d6731347c1edf37858fcc4576197f781684cd6f1dffa93f8a77b32e5b67909d95056ea288d670cb98248003390043fe394e6a1137672f78319a33e8d65a1d9a941901862ac649b643e974a8e17f6ed2c285343005b8fecd615c1b9e59cb60a3651a6ef613203fe4cbf"}, @ETHTOOL_A_BITSET_MASK={0x5f, 0x5, "9d7148aae0368c5ed792490854f1981482832ed8697c149977c3e0b4dca29e0f8fa67083d7a5cfea6b3d16b68ba564b43ffd4cf4b41bf1b35c8d7bebcf1a7cb1156bcf0943296223f5d2b99fc8200b1a4643ebb62304ab93e3701e"}]}, @ETHTOOL_A_FEATURES_WANTED={0x88, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x71, 0x5, "87a0073220a4f9ba955c114358608ead6df3207766a9a2bd97a190af37d2564b5585413c1346dc674e3bb32f21233f535a60ca4ae28472121cb1745fa85a955eff2304243fba540d895bdc04e11efadb4629c0e44e9ad8f1f4a3b71f7e5ba0c36f4d157334e76f702f10833764"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x214, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x12$\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x39ec}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*$-{-.]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xb9{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x84}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\b\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-)\xd3$\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x150, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '-#))/:$/,$*G\xc9)/&\x12)]$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14b}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '![-$](\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '-\xc3/\b{^\',.-#!*,-\x8a\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9de6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x48000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':\\+\\\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xd9\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x648}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5046b25a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4d00}, @ETHTOOL_A_BITSET_MASK={0x18, 0x5, "33ebcc2d87338552315b76c17df34464c4183b0e"}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x438}, 0x1, 0x0, 0x0, 0x805}, 0x800) 00:23:10 executing program 0: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x3000)=nil) (async) 00:23:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 00:23:10 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={0x0}}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) accept4$phonet_pipe(r0, 0x0, &(0x7f00000000c0), 0x80000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={0x0}}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) accept4$phonet_pipe(r0, 0x0, &(0x7f00000000c0), 0x80000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) (async) 00:23:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 00:23:10 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async, rerun: 64) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) (rerun: 64) 00:23:10 executing program 3: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x80010, 0xffffffffffffffff, 0x8000000) 00:23:10 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xfffffffffffffd58) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x80, 0x81, 0x4}, 0x10) 00:23:10 executing program 0: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x80010, 0xffffffffffffffff, 0x8000000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x80010, 0xffffffffffffffff, 0x8000000) (async) 00:23:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc) (async) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 00:23:10 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xfffffffffffffd58) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x80, 0x81, 0x4}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xfffffffffffffd58) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x80, 0x81, 0x4}, 0x10) (async) 00:23:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:10 executing program 3: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9c0d, 0x0) 00:23:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x8917, &(0x7f0000000640)) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:10 executing program 0: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) (async) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9c0d, 0x0) 00:23:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:23:11 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) shmget(0x3, 0x1000, 0x78000103, &(0x7f0000ff8000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x4000)=nil) 00:23:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x8917, &(0x7f0000000640)) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:11 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) shmget(0x3, 0x1000, 0x78000103, &(0x7f0000ff8000/0x1000)=nil) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x4000)=nil) 00:23:11 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000), 0x800) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0xfffffffffffffe41) 00:23:11 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) 00:23:11 executing program 3: ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) ioctl$NBD_DO_IT(r0, 0xab03) 00:23:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 00:23:11 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000), 0x800) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0xfffffffffffffe41) 00:23:11 executing program 1: ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) ioctl$NBD_DO_IT(r0, 0xab03) 00:23:11 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) 00:23:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) (async) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 00:23:11 executing program 3: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) [ 1391.382981][ T6103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1391.387087][ T6103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1391.391282][ T6103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1391.394382][ T6103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1391.399187][ T6103] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1391.401521][ T6103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 00:23:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) socketpair(0xb, 0x1, 0x146, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000001}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) r4 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x0) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, 0x0, 0x0) 00:23:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x17) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:11 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:11 executing program 0: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) 00:23:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x17) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x17) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) 00:23:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) socketpair(0xb, 0x1, 0x146, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000001}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) r4 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x0) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socketpair(0xb, 0x1, 0x146, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000001}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) (async) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, 0x0, 0x0) (async) 00:23:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x2, 0x4) getsockopt$netlink(r0, 0x10e, 0x6, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x4, 0x7, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x26}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4094}, 0x24000001) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:23:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x7) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x2, 0x4) (async) getsockopt$netlink(r0, 0x10e, 0x6, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) (async, rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x4, 0x7, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x26}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4094}, 0x24000001) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:23:11 executing program 3: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:11 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:11 executing program 0: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) 00:23:11 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x2, 0x1, 0x1}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x20, 0x0, 0x35}, 0x10) 00:23:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x7) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:11 executing program 2: r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c191) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048040}, 0x20048090) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1391.805218][ T2691] chnl_net:caif_netlink_parms(): no params data found 00:23:11 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/3, 0x3, 0x0, &(0x7f0000001100)=""/4096, 0x1000}, &(0x7f0000001080)=0x40) 00:23:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0xf) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x19, 0x4) 00:23:11 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) close$fd_v4l2_buffer(r1) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0x4, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) accept$phonet_pipe(r0, &(0x7f0000000300), &(0x7f0000000340)=0x10) connect$phonet_pipe(r0, &(0x7f0000000180)={0x23, 0x57, 0x3, 0x80}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', r3, 0x29, 0xcd, 0x6c, 0x9, 0x49, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, @empty, 0x10, 0x7800, 0x2}}) [ 1391.886412][ T2691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.892928][ T2691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.895028][ T2691] bridge_slave_0: entered allmulticast mode [ 1391.897180][ T2691] bridge_slave_0: entered promiscuous mode [ 1391.904271][ T2691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.906600][ T2691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.909170][ T2691] bridge_slave_1: entered allmulticast mode 00:23:11 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x81, 0x4b}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) [ 1391.911754][ T2691] bridge_slave_1: entered promiscuous mode 00:23:11 executing program 0: r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c191) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048040}, 0x20048090) (async) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1391.926689][ T2691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.932198][ T2691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:23:11 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/3, 0x3, 0x0, &(0x7f0000001100)=""/4096, 0x1000}, &(0x7f0000001080)=0x40) [ 1391.987799][ T2691] team0: Port device team_slave_0 added 00:23:11 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x2, 0x1, 0x1}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x20, 0x0, 0x35}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x2, 0x1, 0x1}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x20, 0x0, 0x35}, 0x10) (async) [ 1392.010117][ T2691] team0: Port device team_slave_1 added 00:23:12 executing program 2: socket$inet_smc(0x2b, 0x1, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ff8000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:23:12 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x81, 0x4b}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:12 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x2001, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), 0x4) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) [ 1392.076434][ T2691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.078175][ T2691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 00:23:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) (async, rerun: 64) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) (rerun: 64) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0xf) (async) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x19, 0x4) [ 1392.103768][ T2691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 00:23:12 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1392.119900][ T2691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.121781][ T2691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 00:23:12 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ff8000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) socket$inet_smc(0x2b, 0x1, 0x0) (async) shmget(0x0, 0x1000, 0x0, &(0x7f0000ff8000/0x1000)=nil) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) [ 1392.134997][ T2691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 00:23:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 00:23:12 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:12 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x2001, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), 0x4) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x2001, 0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), 0x4) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) 00:23:12 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x445c00, 0x0) write$snapshot(r0, &(0x7f0000000040)="0d41ac51713a3ad45164a478957f15debec531b1097edb699ba5c5550eff478b77022827f6291c532c0f9178fee0c97593813f7123f6304efebf5edfa831d2e8d15c4698ed79959e42d58de1e4513dba2d92cd41b22de9af35aa50f5a21d87f21f0765ea3f002679060f3da988a678ec6570ad14be67d2996a6757bef179454b0186c633472ddaf151af53f1a54a11cf9eaaae4deb", 0x95) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:23:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 00:23:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async, rerun: 32) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (rerun: 32) [ 1392.226454][ T2691] hsr_slave_0: entered promiscuous mode 00:23:12 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x445c00, 0x0) write$snapshot(r0, &(0x7f0000000040)="0d41ac51713a3ad45164a478957f15debec531b1097edb699ba5c5550eff478b77022827f6291c532c0f9178fee0c97593813f7123f6304efebf5edfa831d2e8d15c4698ed79959e42d58de1e4513dba2d92cd41b22de9af35aa50f5a21d87f21f0765ea3f002679060f3da988a678ec6570ad14be67d2996a6757bef179454b0186c633472ddaf151af53f1a54a11cf9eaaae4deb", 0x95) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:23:12 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xf) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) [ 1392.271845][ T2691] hsr_slave_1: entered promiscuous mode 00:23:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x80002) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x106, 0x8}}, 0x20) mmap$dsp(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1, 0x810, r0, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x48080) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000008, 0x1010, r2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0xb9b, 0x5, 0x4, 0x40, 0xffff, {}, {0x3, 0x2, 0x63, 0x0, 0x7, 0x0, "e88a96ed"}, 0x5, 0x4, {}, 0x0, 0x0, r1}) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:23:12 executing program 1: socket$netlink(0x10, 0x3, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002180)={&(0x7f0000000040)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000002140)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) [ 1392.309448][ T2691] debugfs: Directory 'hsr0' with parent 'hsr' already present! 00:23:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:12 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x80002) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x106, 0x8}}, 0x20) mmap$dsp(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1, 0x810, r0, 0x0) (async, rerun: 64) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x48080) (async, rerun: 64) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) (rerun: 64) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000008, 0x1010, r2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0xb9b, 0x5, 0x4, 0x40, 0xffff, {}, {0x3, 0x2, 0x63, 0x0, 0x7, 0x0, "e88a96ed"}, 0x5, 0x4, {}, 0x0, 0x0, r1}) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) [ 1392.329121][ T2691] Cannot create hsr debugfs directory 00:23:12 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r2 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:23:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) 00:23:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:12 executing program 0: socket$netlink(0x10, 0x3, 0xe) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002180)={&(0x7f0000000040)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000002140)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:12 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) 00:23:12 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x80002) close$fd_v4l2_buffer(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000380), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r3, 0x2}}, 0x18) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x1ff) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000480)) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xccc) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000500)) close$fd_v4l2_buffer(r0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:23:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) [ 1392.496193][ T2691] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:23:12 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) (async) r2 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:23:12 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x80002) close$fd_v4l2_buffer(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000380), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r3, 0x2}}, 0x18) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x1ff) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000480)) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xccc) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000500)) close$fd_v4l2_buffer(r0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x80002) (async) close$fd_v4l2_buffer(r0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x111, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000380), r2, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r3}}, 0x30) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r3, 0x2}}, 0x18) (async) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x1ff) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) (async) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000480)) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xccc) (async) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000500)) (async) close$fd_v4l2_buffer(r0) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) 00:23:12 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xffffffffffffffc4) 00:23:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) close$fd_v4l2_buffer(r1) (async) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0x4, 0x4) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async) accept$phonet_pipe(r0, &(0x7f0000000300), &(0x7f0000000340)=0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000180)={0x23, 0x57, 0x3, 0x80}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', r3, 0x29, 0xcd, 0x6c, 0x9, 0x49, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, @empty, 0x10, 0x7800, 0x2}}) [ 1392.601524][ T2691] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:23:12 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x5d) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x5c67, 0xffffffffffffff60) 00:23:12 executing program 1: r0 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff9000/0x4000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/165, 0xa5, 0x0, &(0x7f0000000440)=""/196, 0xc4}, &(0x7f00000001c0)=0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/218, 0xda, 0x0, &(0x7f0000000100)=""/139, 0x8b}, &(0x7f0000000200)=0x40) 00:23:12 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x1150c1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080)=0x776b, 0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, 0x0, 0x0) connect$phonet_pipe(r2, &(0x7f00000000c0)={0x23, 0xb0, 0x8, 0xe7}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000100)={0x23, 0x7f, 0x1, 0x9}, 0x10) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) 00:23:12 executing program 2: r0 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff9000/0x4000)=nil) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/165, 0xa5, 0x0, &(0x7f0000000440)=""/196, 0xc4}, &(0x7f00000001c0)=0x40) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/218, 0xda, 0x0, &(0x7f0000000100)=""/139, 0x8b}, &(0x7f0000000200)=0x40) [ 1392.669233][ T6103] Bluetooth: hci2: command 0x0406 tx timeout 00:23:12 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), 0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x5d) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x5c67, 0xffffffffffffff60) [ 1392.684035][ T2691] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:23:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xffffffffffffffc4) 00:23:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) bind$netlink(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4) [ 1392.741918][ T2691] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:23:12 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x1150c1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080)=0x776b, 0x4) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, 0x0, 0x0) (async) connect$phonet_pipe(r2, &(0x7f00000000c0)={0x23, 0xb0, 0x8, 0xe7}, 0x10) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000100)={0x23, 0x7f, 0x1, 0x9}, 0x10) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) 00:23:12 executing program 1: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x1000)=nil) 00:23:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) bind$netlink(r1, 0x0, 0x0) (async) bind$netlink(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4) 00:23:12 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xfffffffffffffd46) 00:23:12 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0xfe, 0x81, 0x25}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x8, 0x35}, 0x10) 00:23:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) inotify_rm_watch(r1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x5) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x484, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x400, 0x8000, 0x1, 0x7}, 0x10) 00:23:12 executing program 1: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x1000)=nil) (async) 00:23:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x484, 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x400, 0x8000, 0x1, 0x7}, 0x10) 00:23:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xfffffffffffffd46) 00:23:12 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) inotify_rm_watch(r1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x5) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), 0x4) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) [ 1392.929549][ T2691] netdevsim netdevsim4 netdevsim0: renamed from eth0 00:23:12 executing program 2: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@bcast, @rose, @null, @bcast, @null, @null, @rose, @netrom]}, &(0x7f00000000c0)=0x48, 0x0) connect$netrom(r0, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2}, [@default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x5c, 0x4) 00:23:12 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async, rerun: 32) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0xfe, 0x81, 0x25}, 0x10) (async, rerun: 32) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x8, 0x35}, 0x10) [ 1392.963378][ T2691] netdevsim netdevsim4 netdevsim1: renamed from eth1 00:23:12 executing program 2: r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendto$netrom(r0, &(0x7f0000000040)="8db76569885b10c49f163b78e24c31419069cfd33cfe037d219b35cb2f698616ebdd40c8872007859680947f3d1939f561c09161f03a6c96df84870d76e18b3b46c295e97d496c9d347c90c289ebb9a2a7cf24590c6a7beaac0f6d0532a9dbab0b059894ab9e4b62", 0x68, 0x40040001, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:23:12 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@bcast, @rose, @null, @bcast, @null, @null, @rose, @netrom]}, &(0x7f00000000c0)=0x48, 0x0) connect$netrom(r0, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2}, [@default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x5c, 0x4) 00:23:12 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80000) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), 0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) [ 1393.004578][ T2691] netdevsim netdevsim4 netdevsim2: renamed from eth2 00:23:12 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x8, 0x5, 0x7f}, 0x10) 00:23:13 executing program 0: r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendto$netrom(r0, &(0x7f0000000040)="8db76569885b10c49f163b78e24c31419069cfd33cfe037d219b35cb2f698616ebdd40c8872007859680947f3d1939f561c09161f03a6c96df84870d76e18b3b46c295e97d496c9d347c90c289ebb9a2a7cf24590c6a7beaac0f6d0532a9dbab0b059894ab9e4b62", 0x68, 0x40040001, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) [ 1393.041931][ T2691] netdevsim netdevsim4 netdevsim3: renamed from eth3 00:23:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x204700}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x3a0, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_MASK={0x15, 0x5, "6b1b6108007a01a924ff8dfa543a34cb89"}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "5a4a48f9a228a76707bc2e6c4700fc13d60a316074faa7755b3b1172d00a570d53700d0fbcf7676f3176abaa36e86098353ed0e97919857141b5a1150f99"}, @ETHTOOL_A_BITSET_MASK={0x9a, 0x5, "feb5bf1d7a7a74cafbb0b56998ab50561d9ad4b3c605281803716642103c2a2b49ba044fa8dcd0b12136d6c630b9ec64e0103d1f2517ecc7fc7f347e9153bf7796b0213ac397c7d28e0261da4b5dce081d5d29e84e5d4a3a14932d7fd43217e4d4804fc56323aa4e26516790f76a6144a3327da11da093e8c3a5d4e1e9d393cd396231bbdb88d57aa6da827687fa76a0b2cf7a529f95"}, @ETHTOOL_A_BITSET_MASK={0xac, 0x5, "6ad157da04403aed37e128ef951964d00b59f6bf57877c31f961e756eb153a487d5cd66754ecea6a0903084fefb5ec876cef2aeff32b9a3308867b5df8403412e1fbdc0cc4bf0781107ab0eb3300e3dd1faf761062c7bde84ff4b95dab23996caf9a59a0e11adb618486f54aad950716a7b95b70a67013c536d813a2894495eb09243cd647c11a24bbac00c62e73a23b7ae331e8d5fe196bbcc35d7186c1b3bc474dde9999022d0c"}]}, @ETHTOOL_A_FEATURES_WANTED={0xfc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xef, 0x5, "37f336ab8c40bb995859a57d049757947660aeab51c9248871ac65232ce08a4c7828823c4f60c408436a446956d0990148933f269ba659031ca839cdda52e441664f1afe7c07f519dd72e642b84d7b3fa5979b6fcf420d40bdc86753690969ac340d962d1872e6d9a8b8412e0f36034836d73e90844acd5099fea551dc1c9bc10c75cdcda2b3d57ecb68d6134a0c41b5a6dd370b467ee252dc96d14253b324101acd825560b8c4f133f53d114ef881b7768b6470e1e8dcef0e98dfef239eb7e65c8595d256411f8e44f5b8d46261f0b2fd984dd71a8265445ba286576cf63b85b1d0ee367660cc1ed0d185"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xcd0e}]}, @ETHTOOL_A_FEATURES_WANTED={0xc0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "1e736ec2ac0f45089ba82a99bd36e9edb3542606b48595090e0f15afe7adb11134617156f23c8be212a734690bb596322cd1e52c31752a79410a9910bdfde259d05e4bb39321009cddb75f2d115bd7177154c213cfc8a7dfd4c18d151b845c03c183be2c8c485451f5e6289c214d81b45c5c913b1c34fff920d225799847eb6954dfad24ddb6143ed3873ab0b069fa6fa789a92b885025a6ea4d9b4482e26875588aaadb65a0b4ed7979ad240bfe155b08708d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x1f, 0x80, 0x3ff, 0x41, @dev={0xfe, 0x80, '\x00', 0x24}, @private0, 0x10, 0x8, 0x8, 0x1}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x2ac, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x58, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "98ba0a21259ad431b0b1757669590ad3f3eed3284bc14ec13b202311a734c93f9576bd439e399769517f3991184af696356677036224be037d257a20d5455300a42c8b8f35f0d4870805ba2993"}]}, @ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x4f, 0x5, "7da13a1de8023210d171ebd4cfd2af0d5adf5acbbc187a986fa58d924c0d0f495127222b7c6be22d03a903f0a1c2053f9dc167653f287316f522e260e41c899978be2f1188f662f630d1bc"}]}, @ETHTOOL_A_FEATURES_WANTED={0x15c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4a, 0x4, "f389edc4463f0eaea1121ecaa7e8eff126f0f89fa326c532e7d3ae3bc145611c9730e216cfcd26e1f55df6bbaa536160269fda5a1a5982026b0c81d3b7846e08102b2dc8720c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbb, 0x5, "fa2b0afa628b9ab7fa07a7ad14df7f4f14b522a2b38ce85d1eb1b72154a2b7de9af178cc616d69ae46b47e529b1f843a672695f96425a5af90933e427722d5452e28a78a72c4add9890330959787f24548aedf3da0a2eb9970312e68b6474e782d7c0da849d811dae3573f049b255290010f088b043172ba840e27a2181450d861cc1831ded30e2b54c3f5eeb5e549e94b5e2ecdd9cde580f82b9ded906eb9dba8cbf6958883191d866d1f009fb7f6e709a64a009a6c2c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x44, 0x5, "23a1cb90d90922f33b99afbaf71724629ff2e23d7df55b2aef297edf73a370ba0aab6842ff1ae6d31a6f205de468ccd54d818b541778fb296ffbb4e3a08d0673"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x811}, 0x1) 00:23:13 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xbfe1da926fd86d6, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x6) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x1f) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000080)) 00:23:13 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:23:13 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x8, 0x5, 0x7f}, 0x10) 00:23:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x204700}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x3a0, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_MASK={0x15, 0x5, "6b1b6108007a01a924ff8dfa543a34cb89"}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "5a4a48f9a228a76707bc2e6c4700fc13d60a316074faa7755b3b1172d00a570d53700d0fbcf7676f3176abaa36e86098353ed0e97919857141b5a1150f99"}, @ETHTOOL_A_BITSET_MASK={0x9a, 0x5, "feb5bf1d7a7a74cafbb0b56998ab50561d9ad4b3c605281803716642103c2a2b49ba044fa8dcd0b12136d6c630b9ec64e0103d1f2517ecc7fc7f347e9153bf7796b0213ac397c7d28e0261da4b5dce081d5d29e84e5d4a3a14932d7fd43217e4d4804fc56323aa4e26516790f76a6144a3327da11da093e8c3a5d4e1e9d393cd396231bbdb88d57aa6da827687fa76a0b2cf7a529f95"}, @ETHTOOL_A_BITSET_MASK={0xac, 0x5, "6ad157da04403aed37e128ef951964d00b59f6bf57877c31f961e756eb153a487d5cd66754ecea6a0903084fefb5ec876cef2aeff32b9a3308867b5df8403412e1fbdc0cc4bf0781107ab0eb3300e3dd1faf761062c7bde84ff4b95dab23996caf9a59a0e11adb618486f54aad950716a7b95b70a67013c536d813a2894495eb09243cd647c11a24bbac00c62e73a23b7ae331e8d5fe196bbcc35d7186c1b3bc474dde9999022d0c"}]}, @ETHTOOL_A_FEATURES_WANTED={0xfc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xef, 0x5, "37f336ab8c40bb995859a57d049757947660aeab51c9248871ac65232ce08a4c7828823c4f60c408436a446956d0990148933f269ba659031ca839cdda52e441664f1afe7c07f519dd72e642b84d7b3fa5979b6fcf420d40bdc86753690969ac340d962d1872e6d9a8b8412e0f36034836d73e90844acd5099fea551dc1c9bc10c75cdcda2b3d57ecb68d6134a0c41b5a6dd370b467ee252dc96d14253b324101acd825560b8c4f133f53d114ef881b7768b6470e1e8dcef0e98dfef239eb7e65c8595d256411f8e44f5b8d46261f0b2fd984dd71a8265445ba286576cf63b85b1d0ee367660cc1ed0d185"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xcd0e}]}, @ETHTOOL_A_FEATURES_WANTED={0xc0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "1e736ec2ac0f45089ba82a99bd36e9edb3542606b48595090e0f15afe7adb11134617156f23c8be212a734690bb596322cd1e52c31752a79410a9910bdfde259d05e4bb39321009cddb75f2d115bd7177154c213cfc8a7dfd4c18d151b845c03c183be2c8c485451f5e6289c214d81b45c5c913b1c34fff920d225799847eb6954dfad24ddb6143ed3873ab0b069fa6fa789a92b885025a6ea4d9b4482e26875588aaadb65a0b4ed7979ad240bfe155b08708d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x1f, 0x80, 0x3ff, 0x41, @dev={0xfe, 0x80, '\x00', 0x24}, @private0, 0x10, 0x8, 0x8, 0x1}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x2ac, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x58, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "98ba0a21259ad431b0b1757669590ad3f3eed3284bc14ec13b202311a734c93f9576bd439e399769517f3991184af696356677036224be037d257a20d5455300a42c8b8f35f0d4870805ba2993"}]}, @ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x4f, 0x5, "7da13a1de8023210d171ebd4cfd2af0d5adf5acbbc187a986fa58d924c0d0f495127222b7c6be22d03a903f0a1c2053f9dc167653f287316f522e260e41c899978be2f1188f662f630d1bc"}]}, @ETHTOOL_A_FEATURES_WANTED={0x15c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4a, 0x4, "f389edc4463f0eaea1121ecaa7e8eff126f0f89fa326c532e7d3ae3bc145611c9730e216cfcd26e1f55df6bbaa536160269fda5a1a5982026b0c81d3b7846e08102b2dc8720c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbb, 0x5, "fa2b0afa628b9ab7fa07a7ad14df7f4f14b522a2b38ce85d1eb1b72154a2b7de9af178cc616d69ae46b47e529b1f843a672695f96425a5af90933e427722d5452e28a78a72c4add9890330959787f24548aedf3da0a2eb9970312e68b6474e782d7c0da849d811dae3573f049b255290010f088b043172ba840e27a2181450d861cc1831ded30e2b54c3f5eeb5e549e94b5e2ecdd9cde580f82b9ded906eb9dba8cbf6958883191d866d1f009fb7f6e709a64a009a6c2c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x44, 0x5, "23a1cb90d90922f33b99afbaf71724629ff2e23d7df55b2aef297edf73a370ba0aab6842ff1ae6d31a6f205de468ccd54d818b541778fb296ffbb4e3a08d0673"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x811}, 0x1) 00:23:13 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xbfe1da926fd86d6, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x6) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x1f) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000080)) 00:23:13 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:23:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00876f14b1f7a585224cd3f8dd7c3863583a12c3cd46ef1b18c605533143c9cb014e12be6a7472cd70cb5a61b8f037bb2c228864623b44c822f4a414aee5df26c4b4aac054a95f", @ANYRES16=r2, @ANYBLOB="01bb9196bf1f040e99132836cc937d29c55e2f34339e16783d5ddf6f62de6bf5f6945be65279d568b085e1aa5e86d7b931e9fa7595aadf99ce566cae260638b83d8a98b17c01d4883b80467ae2a83f0ad1a2bda52832c2d16ac9fde828b1dc574e01487edddb38"], 0x14}}, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000040)=""/169, &(0x7f0000000100)=0xa9) 00:23:13 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80000) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), 0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 00:23:13 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) mmap$dsp(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1000001, 0x13, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x80002) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) r1 = userfaultfd(0x80800) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ff8000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/200, 0xc8, 0x0, &(0x7f0000000140)=""/158, 0x9e}, &(0x7f0000000240)=0x40) 00:23:13 executing program 3: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xe20e8398530fd95a) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080), 0x4) 00:23:13 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x210d82, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) [ 1393.246049][ T2691] 8021q: adding VLAN 0 to HW filter on device bond0 00:23:13 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1393.291313][ T2691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.296905][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.298920][ T6247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.312637][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.314580][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state 00:23:13 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) mmap$dsp(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1000001, 0x13, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x80002) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) r1 = userfaultfd(0x80800) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ff8000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/200, 0xc8, 0x0, &(0x7f0000000140)=""/158, 0x9e}, &(0x7f0000000240)=0x40) 00:23:13 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$dsp(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1000001, 0x13, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x80002) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) (async) r1 = userfaultfd(0x80800) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ff8000/0x2000)=nil, 0x2000}, 0x1}) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/200, 0xc8, 0x0, &(0x7f0000000140)=""/158, 0x9e}, &(0x7f0000000240)=0x40) 00:23:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00876f14b1f7a585224cd3f8dd7c3863583a12c3cd46ef1b18c605533143c9cb014e12be6a7472cd70cb5a61b8f037bb2c228864623b44c822f4a414aee5df26c4b4aac054a95f", @ANYRES16=r2, @ANYBLOB="01bb9196bf1f040e99132836cc937d29c55e2f34339e16783d5ddf6f62de6bf5f6945be65279d568b085e1aa5e86d7b931e9fa7595aadf99ce566cae260638b83d8a98b17c01d4883b80467ae2a83f0ad1a2bda52832c2d16ac9fde828b1dc574e01487edddb38"], 0x14}}, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000040)=""/169, &(0x7f0000000100)=0xa9) socket$netlink(0x10, 0x3, 0x14) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00876f14b1f7a585224cd3f8dd7c3863583a12c3cd46ef1b18c605533143c9cb014e12be6a7472cd70cb5a61b8f037bb2c228864623b44c822f4a414aee5df26c4b4aac054a95f", @ANYRES16=r2, @ANYBLOB="01bb9196bf1f040e99132836cc937d29c55e2f34339e16783d5ddf6f62de6bf5f6945be65279d568b085e1aa5e86d7b931e9fa7595aadf99ce566cae260638b83d8a98b17c01d4883b80467ae2a83f0ad1a2bda52832c2d16ac9fde828b1dc574e01487edddb38"], 0x14}}, 0x0) (async) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000040)=""/169, &(0x7f0000000100)=0xa9) (async) 00:23:13 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:23:13 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0040, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000080)={0x0, 0x0}) write$capi20_data(r0, &(0x7f0000000000)={{0x10, 0x7f, 0x41, 0x0, 0x3b05, 0x400}, 0xa5, "e10297f75deae6a74408c2a249dd8a208491d70f2c1cf0a72bca3c6bcd9abf37dacba3160ae378d1eaf9ab6c0f86c4d41139f817fa5fa566054709581ae7c3276ec8a1f5030f3e38ae3cf3f46c4b5cf72725d584bf79d4b06514ed9186d12c29790700e324a085915af112322cb11a53237f9f7ce9f98a71e9b104ff3b5a6b6e4f7f0817b9de21f85eb38259645bbd079018c785d3c0f79893a9f0aa53bed8da83e4a5f0e2"}, 0xb7) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:13 executing program 1: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xe20e8398530fd95a) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080), 0x4) 00:23:13 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x2, 0x4) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) [ 1393.459677][T19393] Bluetooth: hci5: command 0x0409 tx timeout 00:23:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) [ 1393.489357][ T2691] 8021q: adding VLAN 0 to HW filter on device batadv0 00:23:13 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x2, 0x4) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:23:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc) (async) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) 00:23:13 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x9, 0xab, 0x1}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x5, 0x4) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0xfffffffffffffdba) accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000180)=0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x40, 0x91, 0xbf}, 0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0), 0x4) 00:23:13 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil) 00:23:13 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0040, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000080)={0x0, 0x0}) write$capi20_data(r0, &(0x7f0000000000)={{0x10, 0x7f, 0x41, 0x0, 0x3b05, 0x400}, 0xa5, "e10297f75deae6a74408c2a249dd8a208491d70f2c1cf0a72bca3c6bcd9abf37dacba3160ae378d1eaf9ab6c0f86c4d41139f817fa5fa566054709581ae7c3276ec8a1f5030f3e38ae3cf3f46c4b5cf72725d584bf79d4b06514ed9186d12c29790700e324a085915af112322cb11a53237f9f7ce9f98a71e9b104ff3b5a6b6e4f7f0817b9de21f85eb38259645bbd079018c785d3c0f79893a9f0aa53bed8da83e4a5f0e2"}, 0xb7) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0040, 0x0) (async) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000080)={0x0, 0x0}) (async) write$capi20_data(r0, &(0x7f0000000000)={{0x10, 0x7f, 0x41, 0x0, 0x3b05, 0x400}, 0xa5, "e10297f75deae6a74408c2a249dd8a208491d70f2c1cf0a72bca3c6bcd9abf37dacba3160ae378d1eaf9ab6c0f86c4d41139f817fa5fa566054709581ae7c3276ec8a1f5030f3e38ae3cf3f46c4b5cf72725d584bf79d4b06514ed9186d12c29790700e324a085915af112322cb11a53237f9f7ce9f98a71e9b104ff3b5a6b6e4f7f0817b9de21f85eb38259645bbd079018c785d3c0f79893a9f0aa53bed8da83e4a5f0e2"}, 0xb7) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) 00:23:13 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x0, 0x100010, r0, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) 00:23:13 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x210d82, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140)) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) (async) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) 00:23:13 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x9, 0xab, 0x1}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x5, 0x4) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0xfffffffffffffdba) accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000180)=0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x40, 0x91, 0xbf}, 0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0), 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x9, 0xab, 0x1}, 0x10) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0xfffffffffffffdba) (async) accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000180)=0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x40, 0x91, 0xbf}, 0x10) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0), 0x4) (async) 00:23:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x1, 0xfff, 0x800, 0x3b89452d}, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000040)=""/15, &(0x7f0000000080)=0xf) 00:23:13 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x0, 0x100010, r0, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) (async) mmap$dsp(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x0, 0x100010, r0, 0x0) (async) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) (async) 00:23:13 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:23:13 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x5d) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) [ 1393.727812][ T2691] veth0_vlan: entered promiscuous mode 00:23:13 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) [ 1393.742948][ T2691] veth1_vlan: entered promiscuous mode 00:23:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x1, 0xfff, 0x800, 0x3b89452d}, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000040)=""/15, &(0x7f0000000080)=0xf) socket$netlink(0x10, 0x3, 0x4) (async) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x1, 0xfff, 0x800, 0x3b89452d}, 0x10) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000040)=""/15, &(0x7f0000000080)=0xf) (async) [ 1393.775424][ T2691] veth0_macvtap: entered promiscuous mode [ 1393.781288][ T2691] veth1_macvtap: entered promiscuous mode 00:23:13 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) [ 1393.794799][ T2691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.797936][ T2691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.802359][ T2691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.805389][ T2691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:23:13 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x5d) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x5d) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) (async) [ 1393.819805][ T2691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.823100][ T2691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.825833][ T2691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:23:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:13 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) [ 1393.832999][ T2691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.836000][ T2691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.842803][ T2691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.851141][ T2691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1393.857896][ T2691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.863701][ T2691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.866914][ T2691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.870501][ T2691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.873593][ T2691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.876557][ T2691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:23:13 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x81, 0x4) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x80, 0x81, 0x61}, 0xffffffffffffff39) [ 1393.885524][ T2691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.889269][ T2691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.892132][ T2691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.894997][ T2691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.899852][ T2691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1393.906015][ T2691] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.909301][ T2691] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.911769][ T2691] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.914124][ T2691] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:23:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) 00:23:13 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x81, 0x4) (async) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x80, 0x81, 0x61}, 0xffffffffffffff39) 00:23:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x99810601764c7d7) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), 0x4) 00:23:13 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x3f, 0xd1, 0x6}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) [ 1394.000410][ T6247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.003391][ T6247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:23:14 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) [ 1394.035737][T27530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.037803][T27530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:23:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:23:14 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x6, 0xaf}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x8, 0x2, 0x99}, 0x10) 00:23:14 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x3f, 0xd1, 0x6}, 0x10) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:23:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x99810601764c7d7) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), 0x4) 00:23:14 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000040)) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x81, 0x40, 0x1}, 0x10) 00:23:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:23:14 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:14 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:14 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x6, 0xaf}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x8, 0x2, 0x99}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x6, 0xaf}, 0x10) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x8, 0x2, 0x99}, 0x10) (async) 00:23:14 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x3f, 0x40, 0x6}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:23:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) 00:23:14 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000040)) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x81, 0x40, 0x1}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000040)) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x81, 0x40, 0x1}, 0x10) (async) 00:23:14 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r2 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 00:23:14 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000006, 0x80110, 0xffffffffffffffff, 0x8000000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x6a, 0x5, 0x8}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x6, 0x0, 0x1}, 0x10) 00:23:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) 00:23:14 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x3f, 0x40, 0x6}, 0x10) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:23:14 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:23:14 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) write$capi20_data(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="a9247f15100000000000000000150000000000000000"], 0x12) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:14 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000006, 0x80110, 0xffffffffffffffff, 0x8000000) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x6a, 0x5, 0x8}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x6, 0x0, 0x1}, 0x10) 00:23:14 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x7f, 0x3, 0xb7}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:23:14 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r2 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) (async) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 00:23:14 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000)="f98dba3e339844e9f9ce5f9d1c62be5f7aec692e0cf953c0606d0f3064af1636bee6663b4bb5db173f09bdca5e14e4586aa0dde00063c581adaeea1254ed36d242f214c7a6db128e4a184b7895ea630b8d83f3a7adec7ad323aea0b32616ad2ecd5f01e26c6fa52acedf9d6390fcad82830227c73a6e2ab001b2fe4d45495e7e8aceda350e7baf6ac04349bd2fe07524b29350f0394225c218c9cc2def50acd716718f818cfaa64e3fea102aa91900d581a42a6d4c33f2a29abfbd2db14e0bbb877386364a76ca01e456db50c384fa4cff5921d6dd7686c5cd6bf91ac43870dfee1af4cc4bbf36b9227df906366d08ebac9f034feb31bf06436cc8c0716248940c1b4e41144f2c99cdc52182c2b6b5e714245688d5ad3bb8252a023921944547d3311d799ed438218c293709636e5f3a18592aadf61a992da96742e320bcbafb951794744827f314bb57de54fe6790815bece133123a82ed46d587529003e71da014788eec66ebc6e3ce1a661d4bcf555a3483e49fac881436a415e2fce338ba338d0aeec5a633a526f1bf5e94d7617d6c412f6a20e3cce2dd808142349ac7214682c959906af12d1ef646b02042527a0276c497e3e1defa4be80b25847605b8f390776cf0197c77658bdc506e16f83beb63253321dc5dbcf9942a8bb23d44a6e614f196dc7240333e3bb6b0cdae36cd6416d5e32f96b574ac55ac3182d054f75d6c448e3d4b2fc2c7ca1bd1445b608687f2a857552bbfb0772c0c98d4707cd5267f548c76384d35f5ea2b4948aaa00615839f7d4c67a946bb354d74fce22c81bd508bd619ed338d353e5443b139007308974b1a91212b10330491bf30ca3e8a0e162b14cc56247bbba673a4b44f63620a0a4284883f274b33f2ff7f1633818d3bc070ce9a7bc4c81df46f74f7e03ca25b106e0a528a27e1531003134bcba9a46f8109d545337216fb28f8162c97a555a43a2a77450b3d15dcbfa96dc7cd7020da04593106880baddae84c9c2231f989bb1b57b1da1bca7d2964d82199cd95820ac59933afd0471d0043515a6b2861f73a37052bd9013558fd0a68a5007a864c3ef49761ded5e5f55fbc80564b83a6d59b88d991c130edc98184f8cd1f4f16e8fa0d29f3cd202ca407527dd01ccebd7b2e48563102fdfe1aa0ef04ef81b8898f200a4fea3d8320ccc4b53c84e204ced921c0a07707d8f376fafdfec6a6f9ce0c8e57d85f6abdbbf8d654875475e5b153ae659e01c2070f4aa5bddf9438f99637942783e058c161b3746bfc62ed756e9ae7666e67e833a86e3060d78f30b1dcd2baef85b632459ee2383265017bdc4c059151b51c10c820b8eb827a891913b546691cc816dd30d120e4f725c6b89623ca545de9f8dd8f9c4251efca487f5aec2d16c60a1c580ec0f06ee8c26df9fa4a02c43930ba177bb3259e818586f4334aa87904909595cb2f544e43ba89e753f489c2038b7a43bcd030de6ae104cd503b9a6512f4caaa3da753545ed566e4188b014c1f404acf2bdc263831dd300d6075a4901fdf33a443303c56579fd29eb785eda5f5ed7f81f3f8cd2171e6bf5436fb2c45654eddc2369aba4116cf4321068055ff37ae2e8b296d3225e3ec5bc4f2bad8d302f1153a103c0434d007283ed9ffabba33a5d04802071de9c1dff8451af72bea723c87541cc1deac85a388c93124e469060a16d85d56d1e7c9f195ccb9665b1cbc6581733443dc5e5e262fd87c76c050aca15156057c0513e3763cfa39235e8ac52b8373a258ba37c163c229bcfd483d85d05ca67fef130172fc0e39a39fba83ce0f76ed8992ae4d9797b11d9a88efe2a47bd6a1d2e10b13f8b082565873cf8e1c3492024e6aaa192a060435c7daf7b5bdc4cfe574bbd1b72d806f33799b95c7e553f01b1749dc698a8c49586f57afdb954ab934da9c2e47befca04c2504c4e23c57cb5466e95789a1c73242fb0b97b41ff6100eb0001c3f39e3ef9338ef7b63292b7c4eb8ce7485a2b30929826de9212934f412382bddf438c088e1c86820b50a1de25369cecbd22645c2fd13f318eb8ae9445f4793bcdcab4b4982973eb33b426574d493562c266e1d677b7e0c14c1babe2889827ee89a3ef35f286eb30ae7d48cfa12b7b8f070104563b168d40bc4f82c14b71c11881a0f519473058eb837c23b03a144622845667378ea86a8300b38ea1f3e0d417d31c820b0c5d3e1f20cabba590772f3c50239bf68197a22c82d781412229f91bc9ae373865e22f4f0bdbfda1cdea66429b97a9a796a7e7b5fcef89f6a6bce3ce75eee11817ca218d1b36b2bdf84642eea710147e4f340aec7c86eb69a882597c7c16aa595837e9571aaa9eaa04db504547a14a0c8071e393b9aa473faa72ade07a663d2c16a9e27fe09005cd83743758134940a5e4066b60d16a38a9fd64c36f03cb9e59af8f940397e3a68ac7bfa02d4d2acee6c5003ed3eebea70f19e42c57b0f13c9e2593657df17b3d0f938c686b2b9a1663238281a6e3e8da4d5fc1ad4a2b250088b7da893bf7d0180803179fabd0dbe981ac698e9f8be42d91360f71649f137fc403151e1c4ed71ba5d5481e9a0dc58f7f82d3b93319eadfd105e837706a97875b9a23dd8ad8d59fb88b57a59c87dfea59c425c6a32758e1b809ccdba659bb689d31c0938ff2dde6e8cf3fd7c8a7ff59f2e1b0591fb752f42ccb2656f42e322849e3c66103de3fd00b9e9f2d0b0f2c86edb5c5d754a2e6e79d0150886bc81fa83d342a3b30120ed948e12f007479233ac2b30c24e029453b991b2d371bc3f31345783442b98496d6edf05bfa3bf9204eb27950490f458754a775d7b17410eb69b82a4407e50671666bea96db74b1ec21cf365c71f78094ba7e23164a37beb7a2a47faa048d0795c70f83fcbe6a7c8f812059e70c17f496745e0c8c435d66958081ab1054b253a23b7ada7b6243cb80f9f78bf3e65a37fac9944dfd36a83decfb72067e1467b052ba710c81773e816efdc272277489da6b96db3a4c60374d7ce9319a1d114a2f4b191bdc5fef600cc0f2e7459c539433818feac99357bad52a0a66402fdf79da63088493fa62b727ba38b9d185f2e3db5f70f23597bae6b94654fcdfe504d330a098a5776793240361c74ed51bd0282f9bf58005d4ed86536a3b429ce4894016ec0333ef5e1bee2be87152797320bf4060008f6049d87642a38996ea62a763a9e4316982c61d09156ae7fa3a0de7b18f4db110ee987745daef18386918cc528796624df25a7e5d80ff6d86aaeb0ad5e7303fb464475bc2360ad920bffdeaa40bab214c1dacb99088258c5591d9f43370faa1455ef6d32334f81f2f9ae161d7c5650a5d20a668624254502ef4882508408aa00a42a9db926381f7a5acfb636c59e263a9f2c9e84103270e859b18bc9d2e5cec5f1b5dc48e738c85060c53b8a26b4f375522e83d558054a99d3a0952e964ba441e7ccb7acd5eaf15c2ddaf10cbb96b17fc59db2442b693a01922a6983c3c12589272531dfcef7c0ef90f68abd3060674c4bfed9d8585bd5d2d02f60440a31b18de6a46523a2054226528da870eef107baf2e8d54e792d9914f6cb1c75a4a917132ba1b31d518cda82c14654df9b06896a23fff0cf07915a1cb448df8f5a7c33f8d7b39763250a434d5cafda48f7cce2e20106e8354e274bd5280f8fd302b50529713cf10da7bf1eda6a999cefab4d7669bec3a6b850f56c7457c1ce8f27c8fe32d636aee1729e4f8dfc8f9153c9e179a33f701044811e4b2519cb9135802de40602636275ed693a8a9a5ffdb003f69c7b6ca8d91900f7d7400f9e2ade0ad24e3754269807b427bd6b01b4e61134c1f3b409fe40a0c3c5c7187ea4228eb3750464248ba1271cfafd54a2633e0b777553e34f251b31abde2634495530cdf5495f14e68179872bf8013ad4cd26feea3abafacc8cd0d79f4590e03fb1bce626e6012a136d9740e2de7c671247194f7fae346e8aa5d4f3546e00c8d47e49d7d95b5f89c772d75605ab4584ebfddce1fe1ab071edb8717921ac206ae58fbbce4ff8d5d8e79e8d4c6086c1ba7b5385ca7146cc9d56d20c8363563ec27b4914b4e4865e8452463704664179f206e387f7088decdd587d1c87f06876b93cac3df0c7cddcbfe8b52c33a42fb15724f875d1f03241a5e1cefc6af8452f94a839a334c0ae0bf26adada0c6882e9d1ef26bca7345a772141bbacbc2cfa2aacb483056b1adec298dea7b766d9e33f21e834dae82ddaafa390c30fb1598ce356052d2c11f0463a44992b6e0369742f86f985e05782e8beb2426956d18d7691d4da6afbbd498f7ca1c68439a5c290a2bdba30be777cd766c6c8c6b2c2aa1ddf0e917bcadd11a5375b94bb84a2eb145e91be5e3c7a3841a7aa87a14b2fb1db7d15b34b41e612afa7961653dc147f64d372f88e00a9c057b2c7c1bcec077afa9ab88698c82a738959f73f09ef5e103dd8ff09cf29b0bb6df0828343163f95c15e2d3be573e1733b85c390efe1419134b6d36917f535bda9b0ddc6d0ea7b5bf005d967b4cb7887f55cb2e1d3dba429171f992d44294e823617c9b511922a02d5f74092bdb5e36f338d4e58ef9c1e5b7b87263c45d7cf4c93820208efeb3985240859ec796a5a1611e0b207f238fd1b94167eb603de30078dc1a7ed72446ffa41b53f252463ea29d11f13d8db710bf94ae19389c17b307f3c43859f0724fd6b89a92162ddbf71ed813c8a5269edcebda7718271d087425264898781afed30811148a7e7ef2b31c397558d2c01287628b21652e3da492c21cca97323e62a7b590f441223b4742690c182c53558fdcfe5f661adff9fe748d8a7f7e39c13fd43cc1105ac7e52a7020b1af6b8f45b9a1beada45492a18c771fb23ad737b026902eeb19f9b6324e6452d9282987c541d4b021daa802dec7e3dbe5393b385ee573efb67d99ae342f90dd4e1bb6910ed15f86c7bc8fd2419b4be715b10e5cc74768d87d235c4d37a369e9c29536ab735229069367b2c51614b5b8d57b6c280045d31424b29bfb859389edf137f2c81c77fadf2e313a465e1cb9844a1f261ce84979d0523f795178e2d950e41d5222d576dfde0aaaa91563dc6ec4b9d25cc4d621b475aa0fe77b09ee178888da922b2efb257a4b098412dc746ae1a824997f782d2b6edba87f1bcdf9793bb9d6d70f85c8cec0cfbcdff43e12cf0fef6884a8ce71ba7edc504f328c97df9ed10028c9f21b5e8582aa2c40bbacddf43b3c57e593f8b4bf767f0f8956bffda20a2bac4c65717e867c123972964cea69cdf5a4354695b97459cd53018f617f1c6174bd2bc754d677cd366e26a0cf2b57ac5633ead262cabbacba803e397fa28faf71ea1d5adb507c13da59edbc8aff3474d07193aa2b07e806e10e2e01dd9d350ea0a98955ca9874962e55604e1a7bad4f6dd343d14f28283e924a5621ac53bcbd2f04a506ba3f2198d4a34dbee5d79299143dd111991f222e804970bc098dcfe2c4f2cbf865f37dc711eb47b8ecfe90549349694f75fac9959efbd6590b1707f3a952172688ecc01ce4d10b2380f16cffe230d781c59f775b51c30dd02531a723a80dab479b6d84e5f4876c3af0cd05e7697843b8c5137faa0d28ab436ec91779841f17f82b6b3fe0dbad3d2de9720a6ca16ddaaf1d370f8abd3474c9d8a5e671ea58f9c5238408da649d4d0003ef099befbe8e5bab819798280e535120efecf717d579a47421685ff15d31caa08f64ca76b9aa43eb0a3b961d909c2c10ddc85cae5836d58edb29b2bef3dcf5f5b9726", 0x1000}, 0x68) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000001080)=0x1, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) write$capi20_data(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="a9247f15100000000000000000150000000000000000"], 0x12) (async, rerun: 32) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (rerun: 32) 00:23:14 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x3) 00:23:14 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x7f, 0x3, 0xb7}, 0x10) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:23:14 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:23:14 executing program 4: getitimer(0x1, &(0x7f0000000000)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040)=0x1, 0x4) 00:23:14 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000)="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", 0x1000}, 0x68) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000001080)=0x1, 0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x850) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x1c, r2, 0x501, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x34, 0x1f, 0x1e, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x8000, 0xe8bb, 0x23}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x80, 0x4, 0x21, @remote, @empty, 0x10, 0x1, 0x2, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x80, 0x40, 0x3800000, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x40, 0x8, 0xed, 0x6}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x158, r5, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20040002}, 0x4000001) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r2, 0x62a, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) 00:23:14 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f0000000040)=0x10, 0x800) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x7f, 0x9, 0xf5}, 0x10) 00:23:14 executing program 0: getitimer(0x1, &(0x7f0000000000)) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040)=0x1, 0x4) 00:23:14 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x1, 0x9, 0x81}, 0x10) 00:23:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x850) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x1c, r2, 0x501, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x34, 0x1f, 0x1e, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x8000, 0xe8bb, 0x23}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x80, 0x4, 0x21, @remote, @empty, 0x10, 0x1, 0x2, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x80, 0x40, 0x3800000, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x40, 0x8, 0xed, 0x6}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x158, r5, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20040002}, 0x4000001) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r2, 0x62a, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) 00:23:14 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:14 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:14 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) 00:23:14 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f0000000040)=0x10, 0x800) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x7f, 0x9, 0xf5}, 0x10) 00:23:14 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 00:23:14 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:14 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x1, 0x9, 0x81}, 0x10) 00:23:14 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:14 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x8) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) (async) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) (async) 00:23:14 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r1) (async) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) (async) 00:23:14 executing program 1: ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x39441314) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x9, 0x40}, 0x10) 00:23:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x1e, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:14 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@default, @default, @netrom, @netrom, @bcast, @remote, @bcast, @null]}, &(0x7f0000000100)=0x48) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 00:23:14 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x9, 0xf9, 0x1a}, 0x10) 00:23:14 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) 00:23:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x1e, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:14 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@default, @default, @netrom, @netrom, @bcast, @remote, @bcast, @null]}, &(0x7f0000000100)=0x48) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 00:23:14 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@default, @default, @netrom, @netrom, @bcast, @remote, @bcast, @null]}, &(0x7f0000000100)=0x48) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 00:23:14 executing program 2: ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x39441314) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x9, 0x40}, 0x10) 00:23:14 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x9, 0xf9, 0x1a}, 0x10) 00:23:14 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@default, @default, @netrom, @netrom, @bcast, @remote, @bcast, @null]}, &(0x7f0000000100)=0x48) (async) accept$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@default, @default, @netrom, @netrom, @bcast, @remote, @bcast, @null]}, &(0x7f0000000100)=0x48) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 00:23:14 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@default, @default, @netrom, @netrom, @bcast, @remote, @bcast, @null]}, &(0x7f0000000100)=0x48) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 00:23:14 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x5}) ioctl$RTC_PIE_OFF(r0, 0x7006) socket$phonet_pipe(0x23, 0x5, 0x2) 00:23:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000000)=""/164, &(0x7f0000000100)=0xa4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:14 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:14 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async, rerun: 64) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64) r2 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) (async, rerun: 32) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) (rerun: 32) 00:23:14 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x600c0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:23:14 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) close$fd_v4l2_buffer(r1) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:14 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@default, @default, @netrom, @netrom, @bcast, @remote, @bcast, @null]}, &(0x7f0000000100)=0x48) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 00:23:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x5}) ioctl$RTC_PIE_OFF(r0, 0x7006) socket$phonet_pipe(0x23, 0x5, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x5}) (async) ioctl$RTC_PIE_OFF(r0, 0x7006) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) 00:23:15 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) (async, rerun: 32) close$fd_v4l2_buffer(r1) (async, rerun: 32) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 32) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (rerun: 32) 00:23:15 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x600c0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) (async) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:23:15 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:15 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) 00:23:15 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:15 executing program 0: socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000000)=""/164, &(0x7f0000000100)=0xa4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:15 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:23:15 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) 00:23:15 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) 00:23:15 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) 00:23:15 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) 00:23:15 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:15 executing program 4: setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) 00:23:15 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:23:15 executing program 1: setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) 00:23:15 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) 00:23:15 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) 00:23:15 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000080), 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) 00:23:15 executing program 4: setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) 00:23:15 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:15 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) 00:23:15 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x3, 0x6, 0xe0}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:15 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:15 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) 00:23:15 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:15 executing program 0: r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000080), 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r1, 0x0, 0x0) (async) connect$phonet_pipe(r1, &(0x7f0000000080), 0x10) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) (async) 00:23:15 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x3, 0x6, 0xe0}, 0x10) (async, rerun: 64) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (rerun: 64) [ 1395.539450][T19393] Bluetooth: hci5: command 0x041b tx timeout [ 1397.628809][T19393] Bluetooth: hci5: command 0x040f tx timeout [ 1397.779010][T19393] Bluetooth: hci4: command 0x0406 tx timeout 00:23:17 executing program 2: mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x13, 0xffffffffffffffff, 0xf2000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x4000010, r1, 0x1e000) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4) 00:23:17 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:23:17 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) 00:23:17 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x3ff, 0x4) 00:23:17 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) close$fd_v4l2_buffer(r1) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x8, 0x5, 0x7f}, 0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) 00:23:17 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:17 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) 00:23:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) 00:23:17 executing program 4: mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x13, 0xffffffffffffffff, 0xf2000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x4000010, r1, 0x1e000) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4) 00:23:17 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:23:17 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) 00:23:17 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) 00:23:17 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) (async, rerun: 32) close$fd_v4l2_buffer(r1) (rerun: 32) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x8, 0x5, 0x7f}, 0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) 00:23:17 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) 00:23:17 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x0, 0x5, 0x4}, 0x10) 00:23:17 executing program 1: getuid() r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x9, 0x4) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:17 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x80, 0x80, 0x2}, 0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:23:17 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040), 0x4) 00:23:18 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) 00:23:18 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x0, 0x5, 0x4}, 0x10) 00:23:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) 00:23:18 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) 00:23:18 executing program 2: getuid() r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 64) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) (rerun: 64) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:18 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x80, 0x80, 0x2}, 0x10) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:23:18 executing program 0: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:23:18 executing program 3: setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) 00:23:18 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x2}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000200)={0x8000000000000000, r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0xb606, 0x4a0202) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x34) connect$phonet_pipe(r3, &(0x7f0000000000)={0x23, 0xcc, 0x4, 0xff}, 0x10) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 00:23:18 executing program 0: setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) 00:23:18 executing program 1: ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000001c0)) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000000c0)=0x1c, 0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="550046b80f3b15ba020000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf250f000000480001801400020070696d36726567300000000000000000140002006261746164765f736c6176655f310000140002006272696467655f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300030000000c00018008000100", @ANYRES32=r1, @ANYBLOB], 0x74}}, 0x1) 00:23:18 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40001, 0x1898c0) close$fd_v4l2_buffer(r1) close$fd_v4l2_buffer(r1) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040)=0xfffffffb, 0x4) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0xfffffffffffffdc9) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xfb, 0x1f, 0x68}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0xff, 0x6, 0xa6}, 0x10) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) 00:23:18 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:23:18 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r2, 0xb}}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, 0x0) 00:23:18 executing program 3: setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) 00:23:18 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x2}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000200)={0x8000000000000000, r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0xb606, 0x4a0202) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x34) (async) connect$phonet_pipe(r3, &(0x7f0000000000)={0x23, 0xcc, 0x4, 0xff}, 0x10) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 00:23:18 executing program 3: ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000001c0)) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000000c0)=0x1c, 0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="550046b80f3b15ba020000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf250f000000480001801400020070696d36726567300000000000000000140002006261746164765f736c6176655f310000140002006272696467655f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300030000000c00018008000100", @ANYRES32=r1, @ANYBLOB], 0x74}}, 0x1) 00:23:18 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) 00:23:18 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r2, 0xb}}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r2, 0xb}}, 0x10) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, 0x0) (async) 00:23:18 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:23:18 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) 00:23:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x12, 0x4) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000000)=""/161, &(0x7f00000000c0)=0xa1) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:18 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) 00:23:18 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40001, 0x1898c0) close$fd_v4l2_buffer(r1) close$fd_v4l2_buffer(r1) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040)=0xfffffffb, 0x4) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0xfffffffffffffdc9) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xfb, 0x1f, 0x68}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0xff, 0x6, 0xa6}, 0x10) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) 00:23:18 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40001, 0x1898c0) close$fd_v4l2_buffer(r1) close$fd_v4l2_buffer(r1) (async) close$fd_v4l2_buffer(r1) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040)=0xfffffffb, 0x4) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0xfffffffffffffdc9) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xfb, 0x1f, 0x68}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0xff, 0x6, 0xa6}, 0x10) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) 00:23:18 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) 00:23:18 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) (async) 00:23:18 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x12, 0x4) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000000)=""/161, &(0x7f00000000c0)=0xa1) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x12, 0x4) (async) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000000)=""/161, &(0x7f00000000c0)=0xa1) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) 00:23:18 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x5, 0x0, 0x81}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x8000000) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x4, 0x6, 0x7}, 0x10) 00:23:18 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x9e, 0x20}, 0x10) r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f00000000c0), 0x80000) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000040), 0x80800) connect$phonet_pipe(r2, &(0x7f0000000080)={0x23, 0x1a, 0x8, 0x5}, 0x10) 00:23:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xb, 0x4) 00:23:18 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:23:18 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xb, 0x4) 00:23:18 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x5, 0x0, 0x81}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x8000000) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x4, 0x6, 0x7}, 0x10) 00:23:18 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x5, 0x0, 0x81}, 0x10) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x8000000) (async) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x4, 0x6, 0x7}, 0x10) 00:23:18 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x9e, 0x20}, 0x10) r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f00000000c0), 0x80000) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000040), 0x80800) connect$phonet_pipe(r2, &(0x7f0000000080)={0x23, 0x1a, 0x8, 0x5}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x9e, 0x20}, 0x10) (async) accept4$phonet_pipe(r0, 0x0, &(0x7f00000000c0), 0x80000) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4) (async) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000040), 0x80800) (async) connect$phonet_pipe(r2, &(0x7f0000000080)={0x23, 0x1a, 0x8, 0x5}, 0x10) (async) 00:23:18 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x15, 0x4) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0xfffffffb, 0xffffffe8, 0x9fd, 0xcaca}, 0x10) close$fd_v4l2_buffer(r1) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 00:23:18 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x111, 0xa}}, 0x20) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:23:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x15, 0x4) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0xfffffffb, 0xffffffe8, 0x9fd, 0xcaca}, 0x10) close$fd_v4l2_buffer(r1) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x15, 0x4) (async) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) (async) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0xfffffffb, 0xffffffe8, 0x9fd, 0xcaca}, 0x10) (async) close$fd_v4l2_buffer(r1) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) 00:23:18 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x111, 0xa}}, 0x20) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) accept$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10) (async) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x111, 0xa}}, 0x20) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) [ 1398.785881][ T3422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:23:18 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) (async, rerun: 64) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (rerun: 64) 00:23:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:18 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x5, 0x7, 0x8}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f00000003c0), 0x4) connect$phonet_pipe(r2, &(0x7f00000000c0)={0x23, 0x7, 0x90, 0x3}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:23:18 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:18 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) getsockname$netlink(r1, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040)=0x8000, 0x4) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x4, 0x7, 0x95}, 0x10) 00:23:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:18 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:18 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x100, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xfffffffffffffe22) 00:23:18 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) 00:23:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0xffffffffffffff26) 00:23:18 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x5, 0x7, 0x8}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f00000003c0), 0x4) (async) connect$phonet_pipe(r2, &(0x7f00000000c0)={0x23, 0x7, 0x90, 0x3}, 0x10) (async, rerun: 32) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (rerun: 32) 00:23:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0xffffffffffffff26) socket$netlink(0x10, 0x3, 0x1) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0xffffffffffffff26) (async) 00:23:18 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async, rerun: 32) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (rerun: 32) 00:23:19 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) getsockname$netlink(r1, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040)=0x8000, 0x4) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x4, 0x7, 0x95}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) (async) getsockname$netlink(r1, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040)=0x8000, 0x4) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x4, 0x7, 0x95}, 0x10) (async) 00:23:19 executing program 1: write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x800) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:19 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:19 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x100, 0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xfffffffffffffe22) 00:23:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x200000) close$fd_v4l2_buffer(r0) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:23:19 executing program 1: socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0xe) 00:23:19 executing program 3: write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x800) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), 0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:19 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:19 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x8001, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) close$fd_v4l2_buffer(r1) r2 = accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0xd0) 00:23:19 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x200000) close$fd_v4l2_buffer(r0) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:23:19 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x100000) 00:23:19 executing program 0: socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0xe) (async) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0xe) 00:23:19 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x8001, 0x4) (async, rerun: 32) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) (rerun: 32) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) close$fd_v4l2_buffer(r1) r2 = accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0xd0) 00:23:19 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:19 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1f, 0x3, 0x4}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) 00:23:19 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:19 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x100000) 00:23:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x161001) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20000) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x4, 0x0, &(0x7f0000000200)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/252, 0xfc, 0x1, &(0x7f0000000240)=""/227, 0xe3}, &(0x7f0000000180)=0x40) r4 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x2000) ioctl$NBD_PRINT_DEBUG(r4, 0xab06) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) 00:23:19 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) 00:23:19 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:19 executing program 1: ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 00:23:19 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) 00:23:19 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:19 executing program 0: ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) (async, rerun: 64) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) (rerun: 64) 00:23:19 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x3000000) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:19 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1f, 0x3, 0x4}, 0x10) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 00:23:19 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xff, 0xff, 0x80}, 0x10) 00:23:19 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000140)=0x4) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080)=0x200, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), 0x4) 00:23:19 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x80002) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) bind$netlink(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000080)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0xc) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) (async) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x3000000) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:19 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xff, 0xff, 0x80}, 0x10) 00:23:19 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) r1 = accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000140)=0x4) (async) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080)=0x200, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), 0x4) 00:23:19 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x80002) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) bind$netlink(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000080)={0xa, 0x4}, 0xc) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000080)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4}, 0xc) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000000) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x1, &(0x7f0000001000)=""/28, 0x1c}, &(0x7f0000001080)=0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000016c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/245, 0xf5, 0x1, &(0x7f00000015c0)=""/241, 0xf1}, &(0x7f0000001700)=0x40) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/191, 0xbf, 0x0, &(0x7f0000001200)=""/122, 0x7a}, &(0x7f00000012c0)=0x40) accept$phonet_pipe(r1, &(0x7f00000010c0), &(0x7f0000001100)=0x10) accept4$phonet_pipe(r1, &(0x7f0000001740), &(0x7f0000001780)=0x10, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001440)={&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/176, 0xfffffffffffffe89, 0x1, &(0x7f0000001300)=""/75, 0x4b}, &(0x7f0000001480)=0x40) 00:23:19 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x80, 0x1}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x9, 0x9, 0x8}, 0x10) 00:23:19 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xffffffffffffff85) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:19 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000000) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1399.699347][ T6103] Bluetooth: hci5: command 0x0419 tx timeout 00:23:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x1, &(0x7f0000001000)=""/28, 0x1c}, &(0x7f0000001080)=0x40) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000016c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/245, 0xf5, 0x1, &(0x7f00000015c0)=""/241, 0xf1}, &(0x7f0000001700)=0x40) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/191, 0xbf, 0x0, &(0x7f0000001200)=""/122, 0x7a}, &(0x7f00000012c0)=0x40) (async) accept$phonet_pipe(r1, &(0x7f00000010c0), &(0x7f0000001100)=0x10) (async) accept4$phonet_pipe(r1, &(0x7f0000001740), &(0x7f0000001780)=0x10, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001440)={&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/176, 0xfffffffffffffe89, 0x1, &(0x7f0000001300)=""/75, 0x4b}, &(0x7f0000001480)=0x40) 00:23:19 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000100)={0x23, 0x99, 0x81, 0x1}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x2, 0x9, 0x1f}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000140)=0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), 0x4) 00:23:19 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x80, 0x1}, 0x10) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x9, 0x9, 0x8}, 0x10) 00:23:19 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xffffffffffffff85) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xffffffffffffff85) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:23:19 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000100)={0x23, 0x99, 0x81, 0x1}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x2, 0x9, 0x1f}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000140)=0x4) (async, rerun: 32) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (rerun: 32) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), 0x4) 00:23:19 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000180)=0xffff, 0x4) 00:23:19 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 00:23:19 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x5, 0x2}, 0x10) 00:23:19 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x46) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:23:19 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000180)=0xffff, 0x4) 00:23:19 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x4, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x4005, 0x4) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x1, 0x6, 0x7}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) [ 1416.179631][ T2250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1416.181257][ T2250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1420.578142][ T5782] udevd[5782]: worker [753] /devices/virtual/block/nbd4 is taking a long time [ 1420.659842][ T1843] block nbd4: Possible stuck request 000000000fceb2a2: control (read@0,4096B). Runtime 60 seconds [ 1428.501293][T19393] Bluetooth: hci1: command 0x0406 tx timeout 00:23:49 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x46) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:23:49 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) 00:23:49 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x5, 0x2}, 0x10) 00:23:49 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xe0, 0x5, 0xa2}, 0x10) 00:23:49 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x4005, 0x4) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x1, 0x6, 0x7}, 0x10) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:23:49 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x300) 00:23:49 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x161001) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20000) (async) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20000) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x4, 0x0, &(0x7f0000000200)) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x4, 0x0, &(0x7f0000000200)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/252, 0xfc, 0x1, &(0x7f0000000240)=""/227, 0xe3}, &(0x7f0000000180)=0x40) r4 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x2000) ioctl$NBD_PRINT_DEBUG(r4, 0xab06) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) 00:23:49 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xe0, 0x5, 0xa2}, 0x10) 00:23:49 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept4$phonet_pipe(r0, 0x0, &(0x7f00000001c0), 0x400) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) 00:23:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x8000}, 0xc) getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xffffff27) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x1e) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x1c, 0x4) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) 00:23:49 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0x200, 0xffffffffffffff28) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4) 00:23:49 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept4$phonet_pipe(r0, 0x0, &(0x7f00000001c0), 0x400) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) accept4$phonet_pipe(r0, 0x0, &(0x7f00000001c0), 0x400) (async) accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) (async) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) 00:23:49 executing program 3: socketpair(0x0, 0xf, 0x0, &(0x7f0000000000)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:49 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000200)) 00:23:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x8000}, 0xc) getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xffffff27) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x1e) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x1c, 0x4) (async) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) 00:23:49 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0x200, 0xffffffffffffff28) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4) 00:23:49 executing program 0: socketpair(0x0, 0xf, 0x0, &(0x7f0000000000)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socketpair(0x0, 0xf, 0x0, &(0x7f0000000000)) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) 00:23:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x13f, 0x1}}, 0x20) r2 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x12, r2, 0x8000000) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10}, 0x18) connect$phonet_pipe(r2, &(0x7f0000000140)={0x23, 0x8, 0x0, 0x1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="41db415795dbe1255c8b24bbac32e68166981e4b76c543e17285671eeca841ea613aa792615e1edf8c", 0x29, r2}, 0x68) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, 0x0, 0x0) 00:23:49 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) 00:23:49 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0xff00) 00:23:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x13f, 0x1}}, 0x20) r2 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x12, r2, 0x8000000) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10}, 0x18) connect$phonet_pipe(r2, &(0x7f0000000140)={0x23, 0x8, 0x0, 0x1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="41db415795dbe1255c8b24bbac32e68166981e4b76c543e17285671eeca841ea613aa792615e1edf8c", 0x29, r2}, 0x68) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x13f, 0x1}}, 0x20) (async) syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x12, r2, 0x8000000) (async) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), 0x10) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10}, 0x18) (async) connect$phonet_pipe(r2, &(0x7f0000000140)={0x23, 0x8, 0x0, 0x1}, 0x10) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="41db415795dbe1255c8b24bbac32e68166981e4b76c543e17285671eeca841ea613aa792615e1edf8c", 0x29, r2}, 0x68) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, 0x0, 0x0) (async) 00:23:49 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x9ead, 0x4) 00:23:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0xffff, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x3d) 00:23:49 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) 00:23:49 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:49 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x3000000) 00:23:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0xffff, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x3d) 00:23:49 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x9ead, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x9ead, 0x4) (async) 00:23:49 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:49 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:23:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x16, 0x4) 00:23:49 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0xff000000) 00:23:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x16, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x16, 0x4) (async) 00:23:49 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000100)={0x23, 0x1, 0x7, 0x20}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000000)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0xab0, 0x12) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1c, 0x81, 0x5}, 0x10) 00:23:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:49 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:23:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000001) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x7070b58fdc558cd6, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x60008800) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r3, 0x0, 0x1, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000815) 00:23:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:49 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x300000000000000) 00:23:49 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) (async) 00:23:49 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000100)={0x23, 0x1, 0x7, 0x20}, 0x10) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000000)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) (async, rerun: 64) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) (async, rerun: 64) write$cgroup_int(r1, &(0x7f00000000c0)=0xab0, 0x12) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1c, 0x81, 0x5}, 0x10) 00:23:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 00:23:50 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:23:50 executing program 1: socket$netlink(0x10, 0x3, 0xb) (async) r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 00:23:50 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0xff00000000000000) 00:23:50 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 00:23:50 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0xa80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f00000000c0)="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", 0x1000, r0}, 0x68) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x80000000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r3) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) connect$phonet_pipe(r3, &(0x7f0000000080)={0x23, 0x9, 0x1, 0x4}, 0x10) 00:23:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000001) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x7070b58fdc558cd6, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x60008800) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r3, 0x0, 0x1, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000815) 00:23:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 00:23:50 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:50 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0xa80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f00000000c0)="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", 0x1000, r0}, 0x68) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x80000000) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r3) (async) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) (async) connect$phonet_pipe(r3, &(0x7f0000000080)={0x23, 0x9, 0x1, 0x4}, 0x10) 00:23:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:23:50 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:23:50 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:50 executing program 0: mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x100000000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:50 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async, rerun: 32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) 00:23:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/159, 0xffffffffffffff3d, 0x0, &(0x7f00000000c0)=""/172, 0xb7}, &(0x7f00000001c0)=0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/198, 0xc6, 0x0, &(0x7f0000000100)=""/50, 0x32}, &(0x7f0000000180)=0x40) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 00:23:50 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x12, r1, 0x8000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x80000001, @loopback, 0x2}, {0xa, 0x4e22, 0xe8, @private0, 0x9}, r2, 0x3}}, 0x48) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:23:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x2, &(0x7f0000000640)) 00:23:50 executing program 2: mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x100000000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x100000000) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) 00:23:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/159, 0xffffffffffffff3d, 0x0, &(0x7f00000000c0)=""/172, 0xb7}, &(0x7f00000001c0)=0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/198, 0xc6, 0x0, &(0x7f0000000100)=""/50, 0x32}, &(0x7f0000000180)=0x40) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 00:23:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/159, 0xffffffffffffff3d, 0x0, &(0x7f00000000c0)=""/172, 0xb7}, &(0x7f00000001c0)=0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/198, 0xc6, 0x0, &(0x7f0000000100)=""/50, 0x32}, &(0x7f0000000180)=0x40) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 00:23:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x2, &(0x7f0000000640)) 00:23:50 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x12, r1, 0x8000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x80000001, @loopback, 0x2}, {0xa, 0x4e22, 0xe8, @private0, 0x9}, r2, 0x3}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x80000001, @loopback, 0x2}, {0xa, 0x4e22, 0xe8, @private0, 0x9}, r2, 0x3}}, 0x48) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:23:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/159, 0xffffffffffffff3d, 0x0, &(0x7f00000000c0)=""/172, 0xb7}, &(0x7f00000001c0)=0x40) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/198, 0xc6, 0x0, &(0x7f0000000100)=""/50, 0x32}, &(0x7f0000000180)=0x40) (async, rerun: 64) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (rerun: 64) 00:23:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x10, &(0x7f0000000640)) 00:23:50 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xfa, 0x8, 0x1}, 0x10) 00:23:50 executing program 2: set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xffffffffffffffff, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x12, r1, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1430.678572][T19393] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1430.682623][T19393] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1430.685495][T19393] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1430.689343][T19393] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1430.691585][T19393] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1430.693657][T19393] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 00:23:50 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 00:23:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000640)) 00:23:50 executing program 0: set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xffffffffffffffff, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x12, r1, 0x0) (async) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:50 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xfa, 0x8, 0x1}, 0x10) 00:23:50 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) 00:23:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5421, &(0x7f0000000640)) [ 1430.852412][T19393] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1430.859525][T19393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1430.868845][T19393] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1430.878947][T19393] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1430.881364][T19393] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 00:23:50 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x8, 0x3, 0x1}, 0x10) 00:23:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) [ 1430.884588][T19393] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 00:23:50 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x9, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100), 0x4) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0)=0x1f, 0x4) 00:23:50 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40000000, 0x20c001) close$fd_v4l2_buffer(r0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x1}) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) 00:23:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5450, &(0x7f0000000640)) 00:23:50 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40000000, 0x20c001) close$fd_v4l2_buffer(r0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x1}) (async) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) 00:23:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5451, &(0x7f0000000640)) 00:23:50 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async, rerun: 32) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x8, 0x3, 0x1}, 0x10) (rerun: 32) 00:23:51 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x9, 0x4) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x9, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100), 0x4) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0)=0x1f, 0x4) 00:23:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000640)) 00:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) 00:23:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:51 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080)=0x1, 0x4) 00:23:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5460, &(0x7f0000000640)) 00:23:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socketpair(0x1f, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8901, &(0x7f0000000640)) 00:23:51 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080)=0x1, 0x4) 00:23:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) (async) [ 1431.178981][T27540] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:23:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) 00:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) socketpair(0x1f, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8902, &(0x7f0000000640)) [ 1431.256657][T27540] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:23:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc040}, 0x80) 00:23:51 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x3, 0x1f, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x1, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xb2, 0x20, 0x1f}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x3, 0x8, 0x8, 0xf9}, 0x14, &(0x7f00000000c0)={0x5, 0xf, 0x14, 0x2, [@generic={0xc, 0x10, 0x3, "1977ca7fc2cfa6b030"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000100)=@string={0x4, 0x3, "5baa"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x40, 0x8, 0x5d, {0x5d, 0x21, "abcedce787c098c14f621714073f502a44df83453577c66865259ed81f3ce7f039c767ce400ef5d5f637d81bcd01ff231fbbccaff676b929d9689cd4b50a72807d9fa84a4fa28e7aff3bfe442dcdcde35f3cb0455aa91516a70daa"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x37dfea571eec614e}}}, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x40, 0x12, 0x58, "d8f34729a6891f82f1246c27f98b2cd8ff64d36744629478daa5f0b17555fc8a3b1513ff7bcd59f83c637f45fdbf68a8e13442b7fef7bbca1ff8a2e1b5a57f0d42e0295b15f1f0a918698a88e3247bd6a0a9d87949e16edd"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x0, 0xe9, {0xe7, "9f102c1417b69eb9ee158f5c14e08d10a5a1704b64fbe21b5a72cd3b28f15f8b39e45c16ad0621cc747dd4bc4390907843ce1c46d09c2da01bb0025b3c8d5c059021185cf3f8482e58fd26323dc37b0ac56efa062625cf6d97cc7a0ce9fee9d7b80303114520cf8c199d66e8be0244e8a2fa71667ab0d419137c360ae9b65daa27eed7efc48d084cfc4d186a698f27afc7af9fd28bf09e598b573f6b866e56c01e8b4e987d711a2d361bffdb484e03b3ee24e2c5cef7af258a7ade765db7614b503cc1a40cf19f4310f7be339d0eb4f7d7cab51a67a7b672ecba3e0191d821a55789d85944e8bb"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0xa}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x7a}}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0xe1, 0x1}, 0x10) 00:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc040}, 0x80) 00:23:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8903, &(0x7f0000000640)) 00:23:51 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0xfffffc60) [ 1431.349566][T27540] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8904, &(0x7f0000000640)) [ 1431.377734][ T3774] chnl_net:caif_netlink_parms(): no params data found 00:23:51 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) [ 1431.406212][T27540] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:23:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8906, &(0x7f0000000640)) 00:23:51 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) (async) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0xfffffc60) 00:23:51 executing program 3: getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) (async) [ 1431.476516][ T3795] chnl_net:caif_netlink_parms(): no params data found 00:23:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8907, &(0x7f0000000640)) [ 1431.496674][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.499270][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.501365][ T3774] bridge_slave_0: entered allmulticast mode [ 1431.503613][ T3774] bridge_slave_0: entered promiscuous mode [ 1431.515821][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.518087][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.520698][ T3774] bridge_slave_1: entered allmulticast mode [ 1431.522873][ T3774] bridge_slave_1: entered promiscuous mode 00:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:23:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), 0x4) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x890b, &(0x7f0000000640)) [ 1431.567630][ T3774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.572467][ T3774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.597611][ T3774] team0: Port device team_slave_0 added [ 1431.599844][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.601859][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.603923][ T3795] bridge_slave_0: entered allmulticast mode [ 1431.606172][ T3795] bridge_slave_0: entered promiscuous mode [ 1431.608739][T19990] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1431.614491][ T3795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.616931][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.619406][ T3795] bridge_slave_1: entered allmulticast mode [ 1431.621734][ T3795] bridge_slave_1: entered promiscuous mode 00:23:51 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1431.633911][ T3774] team0: Port device team_slave_1 added 00:23:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x890c, &(0x7f0000000640)) [ 1431.663016][ T3795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.667591][ T3795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:23:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), 0x4) (async) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:23:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x5, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) close$fd_v4l2_buffer(r2) close$fd_v4l2_buffer(r2) close$fd_v4l2_buffer(r2) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@loopback, 0x1, 0x0, 0x60, 0x0, [{@initdev}, {@empty}, {@empty}, {@private}, {@empty}, {@initdev}]}}) [ 1431.745672][ T3795] team0: Port device team_slave_0 added 00:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x890d, &(0x7f0000000640)) [ 1431.765298][ T3774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1431.771300][ T3774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1431.780715][ T3774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.785773][ T3774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.787774][ T3774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 00:23:51 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) r2 = accept$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r3 = accept4$phonet_pipe(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80800) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0xa3) [ 1431.799177][T19990] usb 1-1: device descriptor read/64, error -71 [ 1431.806394][ T3774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 00:23:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x5, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) close$fd_v4l2_buffer(r2) (async) close$fd_v4l2_buffer(r2) (async) close$fd_v4l2_buffer(r2) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@loopback, 0x1, 0x0, 0x60, 0x0, [{@initdev}, {@empty}, {@empty}, {@private}, {@empty}, {@initdev}]}}) [ 1431.819900][ T3795] team0: Port device team_slave_1 added 00:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8912, &(0x7f0000000640)) 00:23:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000) syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffffb, 0xd8c82) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) inotify_rm_watch(r2, 0x0) 00:23:51 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) r2 = accept$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r3 = accept4$phonet_pipe(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80800) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0xa3) [ 1431.932505][ T3774] hsr_slave_0: entered promiscuous mode [ 1431.973385][ T3774] hsr_slave_1: entered promiscuous mode 00:23:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffffb, 0xd8c82) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) inotify_rm_watch(r2, 0x0) [ 1431.998969][ T3774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1432.001038][ T3774] Cannot create hsr debugfs directory 00:23:51 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) [ 1432.024608][ T3795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.026544][ T3795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.036673][ T3795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.054138][ T3795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.056172][ T3795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.066597][ T3795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.071185][T19990] usb 1-1: new high-speed USB device number 102 using dummy_hcd 00:23:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@bcast, @remote, @null, @netrom, @null, @default, @bcast, @null]}, &(0x7f0000000080)=0x48, 0x80000) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={'rose', 0x0}, 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) socket$inet_udplite(0x2, 0x2, 0x88) 00:23:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8914, &(0x7f0000000640)) 00:23:52 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) [ 1432.180917][ T3795] hsr_slave_0: entered promiscuous mode [ 1432.219382][ T3795] hsr_slave_1: entered promiscuous mode 00:23:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@bcast, @remote, @null, @netrom, @null, @default, @bcast, @null]}, &(0x7f0000000080)=0x48, 0x80000) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={'rose', 0x0}, 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) socket$inet_udplite(0x2, 0x2, 0x88) 00:23:52 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) [ 1432.258981][T19990] usb 1-1: device descriptor read/64, error -71 [ 1432.279452][ T3795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1432.281699][ T3795] Cannot create hsr debugfs directory 00:23:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:23:52 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) [ 1432.379185][T19990] usb usb1-port1: attempt power cycle [ 1432.739149][T19393] Bluetooth: hci6: command 0x0409 tx timeout [ 1432.788729][T19990] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1432.879223][T19990] usb 1-1: device descriptor read/8, error -71 [ 1432.978831][T19393] Bluetooth: hci1: command 0x0409 tx timeout [ 1432.997006][ T3774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.016883][ T3795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1433.115000][ T3774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.120058][ T3795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1433.149132][T19990] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1433.161305][ T3795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1433.238818][T19990] usb 1-1: device descriptor read/8, error -71 [ 1433.305380][ T3774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.309936][ T3795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1433.358900][T19990] usb usb1-port1: unable to enumerate USB device [ 1433.401090][T27540] hsr_slave_0: left promiscuous mode [ 1433.439412][T27540] hsr_slave_1: left promiscuous mode [ 1433.519428][T27540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1433.521569][T27540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.525489][T27540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1433.527407][T27540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.535809][T27540] bridge_slave_1: left allmulticast mode [ 1433.537316][T27540] bridge_slave_1: left promiscuous mode [ 1433.544787][T27540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.589591][T27540] bridge_slave_0: left allmulticast mode [ 1433.591169][T27540] bridge_slave_0: left promiscuous mode [ 1433.592718][T27540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.718811][T27540] veth1_macvtap: left promiscuous mode [ 1433.720300][T27540] veth0_macvtap: left promiscuous mode [ 1433.722621][T27540] veth1_vlan: left promiscuous mode [ 1433.724231][T27540] veth0_vlan: left promiscuous mode [ 1433.877825][T27540] team0 (unregistering): Port device team_slave_1 removed [ 1433.886563][T27540] team0 (unregistering): Port device team_slave_0 removed [ 1433.893759][T27540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.944411][T27540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.065888][T27540] bond0 (unregistering): Released all slaves [ 1434.199111][ T3774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.241279][ T3795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.250915][ T3795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.259423][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.261208][ T6247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.264662][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.266505][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state 00:23:54 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) 00:23:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8915, &(0x7f0000000640)) 00:23:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1434.394059][ T3795] 8021q: adding VLAN 0 to HW filter on device batadv0 00:23:54 executing program 3: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x3, 0x1f, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x1, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xb2, 0x20, 0x1f}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x3, 0x8, 0x8, 0xf9}, 0x14, &(0x7f00000000c0)={0x5, 0xf, 0x14, 0x2, [@generic={0xc, 0x10, 0x3, "1977ca7fc2cfa6b030"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000100)=@string={0x4, 0x3, "5baa"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x40, 0x8, 0x5d, {0x5d, 0x21, "abcedce787c098c14f621714073f502a44df83453577c66865259ed81f3ce7f039c767ce400ef5d5f637d81bcd01ff231fbbccaff676b929d9689cd4b50a72807d9fa84a4fa28e7aff3bfe442dcdcde35f3cb0455aa91516a70daa"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x37dfea571eec614e}}}, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x40, 0x12, 0x58, "d8f34729a6891f82f1246c27f98b2cd8ff64d36744629478daa5f0b17555fc8a3b1513ff7bcd59f83c637f45fdbf68a8e13442b7fef7bbca1ff8a2e1b5a57f0d42e0295b15f1f0a918698a88e3247bd6a0a9d87949e16edd"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x0, 0xe9, {0xe7, "9f102c1417b69eb9ee158f5c14e08d10a5a1704b64fbe21b5a72cd3b28f15f8b39e45c16ad0621cc747dd4bc4390907843ce1c46d09c2da01bb0025b3c8d5c059021185cf3f8482e58fd26323dc37b0ac56efa062625cf6d97cc7a0ce9fee9d7b80303114520cf8c199d66e8be0244e8a2fa71667ab0d419137c360ae9b65daa27eed7efc48d084cfc4d186a698f27afc7af9fd28bf09e598b573f6b866e56c01e8b4e987d711a2d361bffdb484e03b3ee24e2c5cef7af258a7ade765db7614b503cc1a40cf19f4310f7be339d0eb4f7d7cab51a67a7b672ecba3e0191d821a55789d85944e8bb"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0xa}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x7a}}) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0xe1, 0x1}, 0x10) 00:23:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 00:23:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8916, &(0x7f0000000640)) [ 1434.460104][ T4054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.462919][ T4054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.475874][ T3795] veth0_vlan: entered promiscuous mode [ 1434.485760][ T3774] netdevsim netdevsim4 netdevsim0: renamed from eth0 00:23:54 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0x0) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) [ 1434.533140][ T3774] netdevsim netdevsim4 netdevsim1: renamed from eth1 00:23:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 00:23:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8917, &(0x7f0000000640)) [ 1434.560887][ T3774] netdevsim netdevsim4 netdevsim2: renamed from eth2 00:23:54 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) close$fd_v4l2_buffer(r1) accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffff38, 0x800) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x6, 0x7, 0x1f}, 0x10) [ 1434.616162][ T3774] netdevsim netdevsim4 netdevsim3: renamed from eth3 00:23:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="64010100000000009000000000000000e0000001000000000000000000000000e0000002000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac141400000000000000000000000000000000000000000000000000000000007f00000100"/160]}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@empty, 0x0, 0x0, 0x10, 0x0, [{@multicast1}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:23:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8918, &(0x7f0000000640)) 00:23:54 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) (async) close$fd_v4l2_buffer(r1) (async) accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffff38, 0x800) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x6, 0x7, 0x1f}, 0x10) 00:23:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="64010100000000009000000000000000e0000001000000000000000000000000e0000002000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac141400000000000000000000000000000000000000000000000000000000007f00000100"/160]}) (async, rerun: 32) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@empty, 0x0, 0x0, 0x10, 0x0, [{@multicast1}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1434.720512][ T3795] veth1_vlan: entered promiscuous mode 00:23:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8919, &(0x7f0000000640)) [ 1434.780989][ T3795] veth0_macvtap: entered promiscuous mode 00:23:54 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x5, 0x0, 0x2}, 0x10) [ 1434.798546][ T3795] veth1_macvtap: entered promiscuous mode [ 1434.818760][T19393] Bluetooth: hci6: command 0x041b tx timeout 00:23:54 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) [ 1434.845144][ T3795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.854750][ T3795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.858236][ T3795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.863645][ T3795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.873230][ T3795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.877281][ T3795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.882260][ T3795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.888367][ T3795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.896634][ T3795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.904031][ T3795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:23:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x891a, &(0x7f0000000640)) [ 1434.912123][ T3795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1434.921468][ T3795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.925831][ T3795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.928416][ T3795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.938360][ T3795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.946622][ T3795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.953940][ T3795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:23:54 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) [ 1434.957431][ T3795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.964287][ T3795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.966888][ T3795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.971966][ T3795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.977584][ T3795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1435.004725][ T3795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.006943][ T3795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 00:23:54 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x5, 0x0, 0x2}, 0x10) [ 1435.014202][ T3795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.016736][ T3795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.029948][ T3774] 8021q: adding VLAN 0 to HW filter on device bond0 00:23:55 executing program 2: connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x9, 0x9, 0x8}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x501) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x208, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, 0x1, 0x0, 0x20, 0x0, [{@loopback}, {@broadcast}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000500)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@remote, 0x0, 0x0, 0x10, 0x0, [{@broadcast}]}}) connect$phonet_pipe(r1, &(0x7f0000000540)={0x23, 0x1, 0x81, 0x9}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xbf}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) [ 1435.069569][T19393] Bluetooth: hci1: command 0x041b tx timeout [ 1435.075248][ T3774] 8021q: adding VLAN 0 to HW filter on device team0 00:23:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x891b, &(0x7f0000000640)) [ 1435.110135][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.112064][ T6232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.114835][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.116695][ T6232] bridge0: port 2(bridge_slave_1) entered forwarding state 00:23:55 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x29}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x4c}}, 0x4000840) 00:23:55 executing program 2: setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) [ 1435.223404][T27530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.232118][T27530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:23:55 executing program 3: connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x9, 0x9, 0x8}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x501) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x208, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, 0x1, 0x0, 0x20, 0x0, [{@loopback}, {@broadcast}]}}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000500)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@remote, 0x0, 0x0, 0x10, 0x0, [{@broadcast}]}}) (async) connect$phonet_pipe(r1, &(0x7f0000000540)={0x23, 0x1, 0x81, 0x9}, 0x10) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xbf}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) 00:23:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x891c, &(0x7f0000000640)) [ 1435.294233][ T6232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.296481][ T6232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:23:55 executing program 0: setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) 00:23:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:55 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x29}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x4c}}, 0x4000840) 00:23:55 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x90000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:23:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:55 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x90000, 0x0) (async, rerun: 32) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async, rerun: 32) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 32) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:23:55 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x4, 0x5}, 0x10) 00:23:55 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x3f, 0x2, 0x20}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x32}, 0x10) 00:23:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8933, &(0x7f0000000640)) [ 1435.515002][ T3774] 8021q: adding VLAN 0 to HW filter on device batadv0 00:23:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:23:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:55 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x3f, 0x2, 0x20}, 0x10) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x32}, 0x10) 00:23:55 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x4, 0x5}, 0x10) 00:23:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:23:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8934, &(0x7f0000000640)) 00:23:55 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x18) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x3, 0x80, 0x80}, 0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0), 0x4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x2, 0x1f, 0xff}, 0x10) 00:23:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:55 executing program 0: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder1\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:55 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) write$capi20_data(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x12) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0xfffffffffffffe13) [ 1435.815096][ T3774] veth0_vlan: entered promiscuous mode 00:23:55 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000001c0)=0xfffffff8, &(0x7f0000000200)=0x4) bind$netrom(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x20f}}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) [ 1435.839803][ T3774] veth1_vlan: entered promiscuous mode 00:23:55 executing program 3: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder1\x00'}) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8935, &(0x7f0000000640)) [ 1435.883803][ T3774] veth0_macvtap: entered promiscuous mode [ 1435.887424][ T3774] veth1_macvtap: entered promiscuous mode 00:23:55 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x18) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x3, 0x80, 0x80}, 0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0), 0x4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x2, 0x1f, 0xff}, 0x10) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x18) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x3, 0x80, 0x80}, 0x10) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0), 0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) (async) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x2, 0x1f, 0xff}, 0x10) (async) [ 1435.922760][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:23:55 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000001c0)=0xfffffff8, &(0x7f0000000200)=0x4) (async) bind$netrom(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x20f}}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) [ 1435.946046][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:23:55 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) write$capi20_data(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="83dc3e5c070000b167000000000000000000de4b9e4f4b6489996ea2a04e1fec2506f172ede7ee0954649ab22b276e0b406a9968918705898bb08599adc3f290be12cfd3403e00040000000000003bb51d852997645fc0a13269d1bf883b8cfbb1ceee6dd71549b898f2ab455723a547f75ffe06000000000000005357fc4f83d4d076314be300ea684f40bf0dc4e54f91a6ac299dc5a846e4f9820700000099579042a320cd946eb567aa88afe76a0c9e4f65d2ce3234d5db38222add98349ab589f72061ac77d17e0e47cc1ff0d410ec3c4bb3a936dd14fab59a66e200677a37547eb629933c31486b90dceb02a0fd9920343812ef1ad8e7671ecb4e346b39a4c1776ef32be9526dd76e7b2ce0ac72cf49501965121a23389fad009989d1737906fb11e3bb1c8ea53d330436545c20f44eb647b8f225b6d18eda0f8d5afc48438e4ce876f30b4d27cc45c5437b3de493c14b7ca6fdc14313cb220b69e7fe6ab6cb62"], 0x12) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0xfffffffffffffe13) [ 1435.950411][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.959267][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.970060][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.980809][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.986232][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:23:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) [ 1436.000075][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.005279][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:23:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1436.016035][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.024635][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.030998][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.035793][ T3774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1436.047123][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.050395][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.053278][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.056262][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.059518][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.062594][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.065379][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.068403][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.072835][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 00:23:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8940, &(0x7f0000000640)) [ 1436.075982][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.079807][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.083922][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.090861][ T3774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.105675][ T3774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 00:23:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1436.116743][ T3774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.121921][ T3774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.125544][ T3774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:23:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) 00:23:56 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0xffffffffffffffdb) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x4, 0xfd, 0x3}, 0x10) 00:23:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8941, &(0x7f0000000640)) [ 1436.258418][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.260955][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:23:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:23:56 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100), 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:56 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) (async, rerun: 64) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0xffffffffffffffdb) (rerun: 64) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x4, 0xfd, 0x3}, 0x10) 00:23:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1436.324583][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.327061][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:23:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x894c, &(0x7f0000000640)) 00:23:56 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x4005, 0x4) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x1, 0x6, 0x7}, 0x10) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:23:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) io_uring_setup(0x29ab, &(0x7f0000000300)={0x0, 0x0, 0x7}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:23:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:56 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100), 0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8953, &(0x7f0000000640)) 00:23:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0xcf7, 0x4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x9, 0x7b, 0x4}, 0x10) 00:23:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) io_uring_setup(0x29ab, &(0x7f0000000300)={0x0, 0x0, 0x7}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:23:56 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x11, 0x0, 0xffff, 0x2000, 0xbe}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x7, 0xfa, 0x2, 0xa, 0x6, 0x1, 0x0, 0x149, 0x1}}) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:23:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) io_uring_setup(0x29ab, &(0x7f0000000300)={0x0, 0x0, 0x7}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) io_uring_setup(0x29ab, &(0x7f0000000300)={0x0, 0x0, 0x7}) (async) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 00:23:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8954, &(0x7f0000000640)) 00:23:56 executing program 4: syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)="98259d6bbf9df7b6875866ed9a74681ea8e52db5fe3c58b1a1ebc39bfad036f0effa0bcbccf9251bfda39157242a469cba830bc277a23ef6ae65653b1c554d8db61d11bbf8eab16fd164fbf21e884504423aa83a6f9ecd2abeaf5442ffa656aafcd6548ea896d86e210a22b66dcae828d0ccf77843276dc420f98a1b4bd648a477a022e648c274d04c067639cd5f3996219afdebe3661b8f4247fa2f48dc49aa85b87ec6226345e5e32b8e5462ab19fa5ec7bfe6e9b3a308da04169bd018bd7575632c06cf38293ddf192460", 0xcc, r0}, 0x68) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:56 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x11, 0x0, 0xffff, 0x2000, 0xbe}) (async, rerun: 32) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 32) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x7, 0xfa, 0x2, 0xa, 0x6, 0x1, 0x0, 0x149, 0x1}}) (async, rerun: 64) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (rerun: 64) 00:23:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0xcf7, 0x4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x9, 0x7b, 0x4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0xcf7, 0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x9, 0x7b, 0x4}, 0x10) (async) 00:23:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4003011, r1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004ab828602889a254549f035801d81125dc008dae6e981c040f1d906c4031c6d5fc3e28ef02e92d749fc32b85e57549063300b2e17f016b492a847e6e6d09569374ce92acf398a2b682c605b274ec5e79b6ab31cfede86fa395326f1af14e7cf4845cfa1d1b5e7641a8206a638a518e49ea924c5e0c4ec94bb318f20f3e514a0c00829438b2d78be3799445864f726dba4282c457460460ea1b8016a8b0b0e95315632b3e031a11270a6b467e6dcbcd8bc1b5ee39db67051d8180a6f99557c9b6db568171f9071704b4470057be78adbea2d46be68c41ef5c493e464446160d077dcbb2e9cba9d7935f6560d06e79716da1f7d7cea20008dc3fb982730f9e7afa09f34f786a5f0b56856eba607600a0610c960048810b5ab5b1b334eb96f22ca75d52b30c00", @ANYRES16=r2, @ANYBLOB="02002abd7000fcdbdf25070000000500140076000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc801}, 0xc0c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 00:23:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8955, &(0x7f0000000640)) 00:23:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:56 executing program 0: syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)="98259d6bbf9df7b6875866ed9a74681ea8e52db5fe3c58b1a1ebc39bfad036f0effa0bcbccf9251bfda39157242a469cba830bc277a23ef6ae65653b1c554d8db61d11bbf8eab16fd164fbf21e884504423aa83a6f9ecd2abeaf5442ffa656aafcd6548ea896d86e210a22b66dcae828d0ccf77843276dc420f98a1b4bd648a477a022e648c274d04c067639cd5f3996219afdebe3661b8f4247fa2f48dc49aa85b87ec6226345e5e32b8e5462ab19fa5ec7bfe6e9b3a308da04169bd018bd7575632c06cf38293ddf192460", 0xcc, r0}, 0x68) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)="98259d6bbf9df7b6875866ed9a74681ea8e52db5fe3c58b1a1ebc39bfad036f0effa0bcbccf9251bfda39157242a469cba830bc277a23ef6ae65653b1c554d8db61d11bbf8eab16fd164fbf21e884504423aa83a6f9ecd2abeaf5442ffa656aafcd6548ea896d86e210a22b66dcae828d0ccf77843276dc420f98a1b4bd648a477a022e648c274d04c067639cd5f3996219afdebe3661b8f4247fa2f48dc49aa85b87ec6226345e5e32b8e5462ab19fa5ec7bfe6e9b3a308da04169bd018bd7575632c06cf38293ddf192460", 0xcc, r0}, 0x68) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) 00:23:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8982, &(0x7f0000000640)) 00:23:56 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4003011, r1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="02002abd7000fcdbdf25070000000500140076000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc801}, 0xc0c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 00:23:56 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), 0x4) 00:23:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8983, &(0x7f0000000640)) 00:23:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:56 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair(0x0, 0x2, 0xffffffec, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:23:56 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), 0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), 0x4) (async) 00:23:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x89a0, &(0x7f0000000640)) 00:23:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1436.898716][T19393] Bluetooth: hci6: command 0x040f tx timeout 00:23:56 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1, 0x20, 0xf7}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x800) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004845}, 0x8004) 00:23:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x89a1, &(0x7f0000000640)) 00:23:56 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:56 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1, 0x20, 0xf7}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) 00:23:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x400448c9, &(0x7f0000000640)) 00:23:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004845}, 0x8004) 00:23:57 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x400448dd, &(0x7f0000000640)) 00:23:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xe) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x200020}, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) [ 1437.139644][T19393] Bluetooth: hci1: command 0x040f tx timeout 00:23:57 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) 00:23:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xe) (async) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x200020}, 0xc) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x400454ca, &(0x7f0000000640)) 00:23:57 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0xfd, 0xbd, 0x3}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40049409, &(0x7f0000000640)) 00:23:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x5467a484453eb1f0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x400c050) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x1) 00:23:57 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xe6f328ace1bef98d) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x200000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x18, 0x4) 00:23:58 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x3f}, 0xfffffffffffffdc8) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) 00:23:58 executing program 3: syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair(0x0, 0x2, 0xffffffec, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:23:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xe6f328ace1bef98d) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x200000}, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x18, 0x4) 00:23:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x5467a484453eb1f0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x400c050) (async) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x1) 00:23:58 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0xfd, 0xbd, 0x3}, 0x10) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:58 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040)=0x1, 0x4) 00:23:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40086602, &(0x7f0000000640)) 00:23:58 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) 00:23:58 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x101000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x4, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0xffffffff80000000, r1}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000100)={0x0, r1}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8, 0x18000) close$fd_v4l2_buffer(r3) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) 00:23:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40186366, &(0x7f0000000640)) 00:23:58 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) 00:23:58 executing program 3: socketpair(0x15, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@rand_addr=0x64010102, 0x0, 0x0, 0x50, 0x0, [{@private}, {@broadcast}, {@multicast2}, {@multicast2}, {@multicast1}]}}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:58 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040)=0x1, 0x4) 00:23:58 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x3f}, 0xfffffffffffffdc8) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) 00:23:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x401c5820, &(0x7f0000000640)) 00:23:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) 00:23:58 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x101000) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x4, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0xffffffff80000000, r1}) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000100)={0x0, r1}) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8, 0x18000) close$fd_v4l2_buffer(r3) (async) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) 00:23:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x4020940d, &(0x7f0000000640)) 00:23:58 executing program 4: socketpair(0x15, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@rand_addr=0x64010102, 0x0, 0x0, 0x50, 0x0, [{@private}, {@broadcast}, {@multicast2}, {@multicast2}, {@multicast1}]}}) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:58 executing program 1: setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) getitimer(0x0, &(0x7f0000000100)) 00:23:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) 00:23:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:23:58 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x80, 0xf5}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040)=0x100, 0x4) 00:23:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x80086301, &(0x7f0000000640)) 00:23:58 executing program 1: setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) close$fd_v4l2_buffer(r1) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 00:23:58 executing program 2: setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) (async) r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) getitimer(0x0, &(0x7f0000000100)) 00:23:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) 00:23:58 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x5a, 0xff, 0x40}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:23:58 executing program 4: ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x5, 0x5, 0x4, 0x1, 0x3ff, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x0, 0x59, 0x20, "01fe8f35"}, 0x2, 0x4, {}, 0x10000}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) 00:23:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x80086601, &(0x7f0000000640)) 00:23:58 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x80, 0xf5}, 0x10) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040)=0x100, 0x4) 00:23:58 executing program 2: setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) close$fd_v4l2_buffer(r1) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 00:23:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xd800281}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40411}, 0x4000) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 00:23:58 executing program 0: ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x5, 0x5, 0x4, 0x1, 0x3ff, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x0, 0x59, 0x20, "01fe8f35"}, 0x2, 0x4, {}, 0x10000}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x5, 0x5, 0x4, 0x1, 0x3ff, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x0, 0x59, 0x20, "01fe8f35"}, 0x2, 0x4, {}, 0x10000}) (async) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) (async) 00:23:58 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x5a, 0xff, 0x40}, 0x10) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 00:23:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x80108906, &(0x7f0000000640)) 00:23:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xd800281}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40411}, 0x4000) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 00:23:58 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) connect$netrom(r0, &(0x7f0000000080)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default]}, 0x48) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000100)=0x6, 0x4) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) r2 = accept4$phonet_pipe(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x5fe12270b970c83c) accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x400) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000200)=0x7fffffff, 0x4) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x40, 0x29, 0x31}, 0x10) connect$phonet_pipe(r1, &(0x7f0000000140)={0x23, 0x8, 0x0, 0x40}, 0x10) connect$phonet_pipe(r2, &(0x7f00000002c0)={0x23, 0x20, 0x2}, 0x10) 00:23:58 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x7, 0x1f}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x6, 0x6, 0x1}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:23:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x80108907, &(0x7f0000000640)) 00:23:58 executing program 3: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@remote, @default, @remote, @netrom, @rose, @null, @bcast, @rose]}, &(0x7f0000000080)=0x48) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x3f, 0x4) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) 00:23:58 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x10b000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$RTC_PIE_ON(r0, 0x7005) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@empty, 0x0, 0x0, 0xa0, 0x0, [{@broadcast}, {@local}, {@local}, {@empty}, {@multicast2}, {@loopback}, {@private}, {@private}, {@dev}, {@multicast2}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:23:58 executing program 4: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@remote, @default, @remote, @netrom, @rose, @null, @bcast, @rose]}, &(0x7f0000000080)=0x48) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x3f, 0x4) (async) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) 00:23:58 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x7, 0x1f}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x7, 0x1f}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x6, 0x6, 0x1}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:23:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x801c581f, &(0x7f0000000640)) [ 1438.674761][ T4463] rtc-efi rtc-efi.0: write status is 3 00:23:58 executing program 4: r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) connect$netrom(r0, &(0x7f0000000080)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default]}, 0x48) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000100)=0x6, 0x4) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) r2 = accept4$phonet_pipe(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x5fe12270b970c83c) accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x400) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000200)=0x7fffffff, 0x4) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x40, 0x29, 0x31}, 0x10) connect$phonet_pipe(r1, &(0x7f0000000140)={0x23, 0x8, 0x0, 0x40}, 0x10) connect$phonet_pipe(r2, &(0x7f00000002c0)={0x23, 0x20, 0x2}, 0x10) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) (async) connect$netrom(r0, &(0x7f0000000080)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default]}, 0x48) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000100)=0x6, 0x4) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) accept4$phonet_pipe(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x5fe12270b970c83c) (async) accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x400) (async) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000200)=0x7fffffff, 0x4) (async) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x40, 0x29, 0x31}, 0x10) (async) connect$phonet_pipe(r1, &(0x7f0000000140)={0x23, 0x8, 0x0, 0x40}, 0x10) (async) connect$phonet_pipe(r2, &(0x7f00000002c0)={0x23, 0x20, 0x2}, 0x10) (async) 00:23:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:58 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x10b000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) (async) ioctl$RTC_UIE_ON(r0, 0x7003) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$RTC_PIE_ON(r0, 0x7005) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 00:23:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@empty, 0x0, 0x0, 0xa0, 0x0, [{@broadcast}, {@local}, {@local}, {@empty}, {@multicast2}, {@loopback}, {@private}, {@private}, {@dev}, {@multicast2}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:23:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0xc0045878, &(0x7f0000000640)) 00:23:58 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x7, 0x1f, 0x40}, 0x10) 00:23:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) 00:23:58 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 1438.790147][ T4481] rtc-efi rtc-efi.0: write status is 3 00:23:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x3, {0xa, 0x4e21, 0x5f, @empty, 0x4}, r1}}, 0x38) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0xffffffffffffffff, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000d, 0x1010, r2, 0x1f) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x80010, r2, 0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) 00:23:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0xc0045878, &(0x7f0000000640)) 00:23:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x5, 0x5, 0x11, @empty, @mcast1, 0x10, 0x20, 0x3, 0x45}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000140)={0x504, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{o[\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#[-1-*/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$]!\\%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '+-$:%-\xaf\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-^\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x91, 0x5, "42b2009247e0101d61750689a893af05c5099079c234d08f8b69bd383ed578d3238730afa0ca52cd73b888e56c66a59321e586a463aa38d81fab757f864d0a1cab1cfe8a09a7a945a4d5b6b9a1108c7b82a69dc7715704bddd411c16f82f1b9e10a7d7ad27a81d69578c2605876f21b4ac97d78209ecdfcaf8a56953383e76e13a93de10f1b7770951c3ffddf0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x27c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "dbd0d03a20b57c039def9045498cb93509145e7746ba5b0a0c1206004e9b1bb6f3f20ba78bad9ba4bdcc6ec9616d324684f4ea63280522e49fc1b1e4c07bb34d9063c8fc5e643f5e6116aa048f11255579605bbf768f80569661c44a0d173acbcd263190a6e20d1542201bfa66eb2c40a419a5e19a088d0ff66a9f81d0e8c7971a8eb0b65fc573ecb6218f4e4ceacb7f24ac74c78e777fc4c1c2c2cfb87bc983b29d4721cf2bb94da0cbb26b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x71}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@&(,\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#^-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffe1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-])\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '--])@$+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+/\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, 'j_'}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x4}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%x:{$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '({\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ',!*!&^}%{@.#\xe1*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x04#,++\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{\xdc)!:{\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xce\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3d76}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 's0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x3, {0xa, 0x4e21, 0x5f, @empty, 0x4}, r1}}, 0x38) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0xffffffffffffffff, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000d, 0x1010, r2, 0x1f) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x80010, r2, 0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x3, {0xa, 0x4e21, 0x5f, @empty, 0x4}, r1}}, 0x38) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0xffffffffffffffff, 0x0) (async) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000d, 0x1010, r2, 0x1f) (async) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x80010, r2, 0x3) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) (async) 00:23:58 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x7, 0x1f, 0x40}, 0x10) 00:23:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0xc0189436, &(0x7f0000000640)) 00:23:58 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:58 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:23:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x5, 0x5, 0x11, @empty, @mcast1, 0x10, 0x20, 0x3, 0x45}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000140)={0x504, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{o[\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#[-1-*/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$]!\\%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '+-$:%-\xaf\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-^\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x91, 0x5, "42b2009247e0101d61750689a893af05c5099079c234d08f8b69bd383ed578d3238730afa0ca52cd73b888e56c66a59321e586a463aa38d81fab757f864d0a1cab1cfe8a09a7a945a4d5b6b9a1108c7b82a69dc7715704bddd411c16f82f1b9e10a7d7ad27a81d69578c2605876f21b4ac97d78209ecdfcaf8a56953383e76e13a93de10f1b7770951c3ffddf0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x27c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "dbd0d03a20b57c039def9045498cb93509145e7746ba5b0a0c1206004e9b1bb6f3f20ba78bad9ba4bdcc6ec9616d324684f4ea63280522e49fc1b1e4c07bb34d9063c8fc5e643f5e6116aa048f11255579605bbf768f80569661c44a0d173acbcd263190a6e20d1542201bfa66eb2c40a419a5e19a088d0ff66a9f81d0e8c7971a8eb0b65fc573ecb6218f4e4ceacb7f24ac74c78e777fc4c1c2c2cfb87bc983b29d4721cf2bb94da0cbb26b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x71}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@&(,\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#^-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffe1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-])\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '--])@$+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+/\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, 'j_'}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x4}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%x:{$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '({\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ',!*!&^}%{@.#\xe1*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x04#,++\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{\xdc)!:{\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xce\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3d76}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 's0x0, &(0x7f0000000240)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x3f, 0x44, 0x7fffffff, 0x18, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x40, 0xffffffff, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x1, 0xfffffffd, 0x52, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x20, 0x1, 0x0, 0xd7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0xfe, 0x6, 0x0, @mcast2, @remote, 0xff98, 0x700, 0x6, 0x8}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x94, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x240080e0}, 0x4004080) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:23:59 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:23:59 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x501) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:23:59 executing program 3: shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:23:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x2, &(0x7f0000000640)) 00:23:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) socket$netlink(0x10, 0x3, 0x9) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) 00:23:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x891a, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:23:59 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000004c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000400), r1}}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4, @loopback, 0x5}}}, 0x30) getsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), &(0x7f0000000200)=0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7fffffff, @local, 0x4}, r1}}, 0x30) 00:23:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x9, 0x0, 0x5}, 0x10) (async) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x3f, 0x44, 0x7fffffff, 0x18, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x40, 0xffffffff, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x1, 0xfffffffd, 0x52, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x20, 0x1, 0x0, 0xd7}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0xfe, 0x6, 0x0, @mcast2, @remote, 0xff98, 0x700, 0x6, 0x8}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x94, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x240080e0}, 0x4004080) (async) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:23:59 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:23:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x10, &(0x7f0000000640)) 00:23:59 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) [ 1439.220675][ T6103] Bluetooth: hci1: command 0x0419 tx timeout 00:23:59 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000004c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000400), r1}}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4, @loopback, 0x5}}}, 0x30) (async) getsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), &(0x7f0000000200)=0x4) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7fffffff, @local, 0x4}, r1}}, 0x30) 00:23:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r1, 0x1f, "e353dd", "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"}}, 0x110) r3 = accept4$phonet_pipe(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, 0x0) 00:23:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000640)) 00:23:59 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:23:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x891a, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x891a, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) 00:23:59 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) 00:23:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5421, &(0x7f0000000640)) 00:23:59 executing program 4: io_uring_setup(0x9bc, &(0x7f0000000000)={0x0, 0xc55b, 0x200, 0x1, 0x147}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:23:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r1, 0x1f, "e353dd", "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"}}, 0x110) (async, rerun: 32) r3 = accept4$phonet_pipe(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) (rerun: 32) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, 0x0) 00:23:59 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) 00:23:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f00000000c0)=""/195, &(0x7f00000001c0)=0xc3) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x3ee8, 0x4) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1b, 0x4) 00:23:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:23:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5450, &(0x7f0000000640)) 00:23:59 executing program 2: io_uring_setup(0x9bc, &(0x7f0000000000)={0x0, 0xc55b, 0x200, 0x1, 0x147}) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:23:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:23:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f00000000c0)=""/195, &(0x7f00000001c0)=0xc3) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x3ee8, 0x4) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1b, 0x4) 00:23:59 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) 00:23:59 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), 0x4) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x10, 0x40, 0x5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 00:23:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5451, &(0x7f0000000640)) 00:23:59 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) 00:23:59 executing program 0: socketpair(0x2a, 0x2, 0xc4f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3800008, 0x4000010, r0, 0x80000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:23:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:23:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000640)) 00:23:59 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), 0x4) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x10, 0x40, 0x5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), 0x4) (async) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x10, 0x40, 0x5}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) 00:23:59 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), 0x4) 00:23:59 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) 00:23:59 executing program 2: socketpair(0x2a, 0x2, 0xc4f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3800008, 0x4000010, r0, 0x80000000) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:23:59 executing program 4: socket$netlink(0x10, 0x3, 0x14) (async) r0 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:23:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x545e, &(0x7f0000000640)) 00:23:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000020000001000000000000001c7b0bc790e42c300007f2fd8c08d498b"]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000da4000/0x3000)=nil, &(0x7f00009e3000/0x4000)=nil, &(0x7f0000a70000/0x4000)=nil, &(0x7f0000ca7000/0x1000)=nil, &(0x7f00009c9000/0x1000)=nil, &(0x7f00008cb000/0x1000)=nil, &(0x7f0000000080)="4fb658a9f2fc817e7de03fd2517cbaa2929112ad2d5e61fa27c0aa179e827ae2b8687d4906828a80b685e560fd1566118eb58c777d5964fa3f0627ffb156cc29fa0457c672f7321ba2cefefa8d16a3bbe0c85bcc8a85c8e8583d3a8516c81348d207dc02c688380c441b5253bb1fa6", 0x6f, r0}, 0x68) 00:23:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) 00:23:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5460, &(0x7f0000000640)) 00:23:59 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:59 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), 0x4) (async) 00:23:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000020000001000000000000001c7b0bc790e42c300007f2fd8c08d498b"]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000da4000/0x3000)=nil, &(0x7f00009e3000/0x4000)=nil, &(0x7f0000a70000/0x4000)=nil, &(0x7f0000ca7000/0x1000)=nil, &(0x7f00009c9000/0x1000)=nil, &(0x7f00008cb000/0x1000)=nil, &(0x7f0000000080)="4fb658a9f2fc817e7de03fd2517cbaa2929112ad2d5e61fa27c0aa179e827ae2b8687d4906828a80b685e560fd1566118eb58c777d5964fa3f0627ffb156cc29fa0457c672f7321ba2cefefa8d16a3bbe0c85bcc8a85c8e8583d3a8516c81348d207dc02c688380c441b5253bb1fa6", 0x6f, r0}, 0x68) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000020000001000000000000001c7b0bc790e42c300007f2fd8c08d498b"]}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000da4000/0x3000)=nil, &(0x7f00009e3000/0x4000)=nil, &(0x7f0000a70000/0x4000)=nil, &(0x7f0000ca7000/0x1000)=nil, &(0x7f00009c9000/0x1000)=nil, &(0x7f00008cb000/0x1000)=nil, &(0x7f0000000080)="4fb658a9f2fc817e7de03fd2517cbaa2929112ad2d5e61fa27c0aa179e827ae2b8687d4906828a80b685e560fd1566118eb58c777d5964fa3f0627ffb156cc29fa0457c672f7321ba2cefefa8d16a3bbe0c85bcc8a85c8e8583d3a8516c81348d207dc02c688380c441b5253bb1fa6", 0x6f, r0}, 0x68) (async) 00:23:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) 00:23:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8901, &(0x7f0000000640)) 00:23:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:23:59 executing program 0: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) 00:23:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8902, &(0x7f0000000640)) 00:23:59 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:23:59 executing program 3: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) 00:23:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40086602, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:23:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8903, &(0x7f0000000640)) 00:23:59 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x121440, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x6, 0x3, 0x9}, 0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) 00:23:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$netlink(0x10, 0x3, 0x13) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) 00:23:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:23:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0x101000) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:23:59 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x22, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8010) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:23:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40086602, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40086602, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) 00:23:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0x101000) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0x101000) (async) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) 00:24:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x36) 00:24:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8904, &(0x7f0000000640)) 00:24:00 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x121440, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x6, 0x3, 0x9}, 0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) 00:24:00 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x22, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8010) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:24:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x36) 00:24:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8906, &(0x7f0000000640)) 00:24:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 00:24:00 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x1800) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000100)=0xfff, 0x4) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x22) 00:24:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:24:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:00 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:24:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8907, &(0x7f0000000640)) 00:24:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) (async) 00:24:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x125}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x4080) 00:24:00 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x1800) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000100)=0xfff, 0x4) (async, rerun: 32) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x22) (rerun: 32) 00:24:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x70, 0x80400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x1c}}, 0x881) 00:24:00 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:24:00 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) 00:24:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x125}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x4080) [ 1440.319663][ T4735] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 00:24:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x70, 0x80400) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x1c}}, 0x881) 00:24:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x890b, &(0x7f0000000640)) 00:24:00 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 00:24:00 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x4000010, r0, 0x80000000) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x10) r3 = accept4$phonet_pipe(r2, &(0x7f0000000100), &(0x7f0000000040)=0x10, 0x80800) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x110, r0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r0, 0x80000000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) 00:24:00 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async, rerun: 64) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async, rerun: 64) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 00:24:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x890c, &(0x7f0000000640)) 00:24:00 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) 00:24:00 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x4000010, r0, 0x80000000) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x10) r3 = accept4$phonet_pipe(r2, &(0x7f0000000100), &(0x7f0000000040)=0x10, 0x80800) (async) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x110, r0, 0x0) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async, rerun: 32) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r0, 0x80000000) (async, rerun: 32) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) 00:24:00 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00ff00", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf25000800090004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:24:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x890d, &(0x7f0000000640)) 00:24:00 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), 0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 00:24:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x10001, 0x202000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7000ffdbdf250500000006001c00ffff0000050004008000000008000c000100000008001700", @ANYRES32=r0, @ANYBLOB="0c005cef4a39650000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x800) 00:24:00 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00ff00", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf25000800090004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20000000) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:24:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) 00:24:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8912, &(0x7f0000000640)) 00:24:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x2b}, 0x1}}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000ffdbdf00000000cb183c8733af53bfe7b0ce00876700"/44], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) 00:24:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x10001, 0x202000) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7000ffdbdf250500000006001c00ffff0000050004008000000008000c000100000008001700", @ANYRES32=r0, @ANYBLOB="0c005cef4a39650000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x800) 00:24:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffff010000005000000000000000ac1414bb000000000000000000000000ac1e000001000000000000000000000000000000000000000000000000000000ac1414bb000000000000080000000000"]}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x44080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022abd7000fbdbdf2505000000050014000500000014001f00fe88000000000000000000000000000108001900e0000002084ca760d51a01f33eaac635beb3767ae10011000100000006001d00001000000c001000ab000000050000000800110000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x11) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000001b40)={0x11f4, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x11e0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa604}, @ETHTOOL_A_BITSET_VALUE={0x41, 0x4, "00bc7126c5fba57eaf10fee218b9cd6811a930f3f3b7e35c37b257c4d784daf879d8bdec9ba9e3b06df067826f48c7042209b8a37bce3a98b90fb8e822"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffd8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5f, 0x5, "14aca08105c2d700791d7a7e786e51b8a9ebc7cb628719817f8324dec746069f1b9d520072b62e6d8ae9ebf6376f88a3ac4aff7b39bb5a32a294a8938ae3e5c6cdb04d1cd9cebd2f516f69965b5d108a5fa89f34121791964155ec"}, @ETHTOOL_A_BITSET_VALUE={0xde, 0x4, "2a9cad5474f3eab43c776ff8a0bb27aa98880363beac9fd28860ab09cca395595697463f00299ef1d1f0b32ad4ed9589af0b5113eb99aa3e32528831e47fed2f639deca72c590e2dabeffcf4ddfb287098f717ded826b6347c800c1b4f93424d566a5b35b375936116a48704d05414ffb05a14edbed8256f4ce62580f5a3990e87c1205fb5edaf6573d827934f3ba6089a436a50c838ae9b2bc4d98e03835c5634bc4e8c65c2d2864a5f67707a80e891e2604728ed8323165f278f9b61aa91c20276383e224a7eccfae6081ca3e9f88864f039ac99b6858035fd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x20004801}, 0x40000) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:24:00 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0xfffffffffffffe75) 00:24:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8914, &(0x7f0000000640)) 00:24:00 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x2b}, 0x1}}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000ffdbdf00000000cb183c8733af53bfe7b0ce00876700"/44], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) 00:24:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x20, 0x4, 0x48, @loopback, @mcast1, 0x700, 0x7800, 0x3, 0x8}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f0000000940)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0xe014051}, 0x20048001) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x0, 0x2, 0x30, @loopback, @mcast2, 0x80, 0x20, 0x80000000, 0x80000000}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x96, 0x2, 0x24f452ea, 0x2, @loopback, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1, 0x40, 0x2, 0x9}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) r10 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000a80)) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x154, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4048050}, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x92d2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 00:24:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffff010000005000000000000000ac1414bb000000000000000000000000ac1e000001000000000000000000000000000000000000000000000000000000ac1414bb000000000000080000000000"]}) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x44080) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022abd7000fbdbdf2505000000050014000500000014001f00fe88000000000000000000000000000108001900e0000002084ca760d51a01f33eaac635beb3767ae10011000100000006001d00001000000c001000ab000000050000000800110000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x11) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000001b40)={0x11f4, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x11e0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa604}, @ETHTOOL_A_BITSET_VALUE={0x41, 0x4, "00bc7126c5fba57eaf10fee218b9cd6811a930f3f3b7e35c37b257c4d784daf879d8bdec9ba9e3b06df067826f48c7042209b8a37bce3a98b90fb8e822"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffd8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5f, 0x5, "14aca08105c2d700791d7a7e786e51b8a9ebc7cb628719817f8324dec746069f1b9d520072b62e6d8ae9ebf6376f88a3ac4aff7b39bb5a32a294a8938ae3e5c6cdb04d1cd9cebd2f516f69965b5d108a5fa89f34121791964155ec"}, @ETHTOOL_A_BITSET_VALUE={0xde, 0x4, "2a9cad5474f3eab43c776ff8a0bb27aa98880363beac9fd28860ab09cca395595697463f00299ef1d1f0b32ad4ed9589af0b5113eb99aa3e32528831e47fed2f639deca72c590e2dabeffcf4ddfb287098f717ded826b6347c800c1b4f93424d566a5b35b375936116a48704d05414ffb05a14edbed8256f4ce62580f5a3990e87c1205fb5edaf6573d827934f3ba6089a436a50c838ae9b2bc4d98e03835c5634bc4e8c65c2d2864a5f67707a80e891e2604728ed8323165f278f9b61aa91c20276383e224a7eccfae6081ca3e9f88864f039ac99b6858035fd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x20004801}, 0x40000) (async) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:24:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x2, &(0x7f0000000640)) 00:24:00 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0xfffffffffffffe75) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0xfffffffffffffe75) (async) 00:24:00 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:00 executing program 0: r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @bcast, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1ff, 0x7, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x5ab383, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000280)=0xaa, &(0x7f00000002c0)=0x4) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) close$fd_v4l2_buffer(r2) r3 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={@empty, 0x0, 0x0, 0x20, 0x0, [{}, {@dev}]}}) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x4) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:24:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x20, 0x4, 0x48, @loopback, @mcast1, 0x700, 0x7800, 0x3, 0x8}}) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f0000000940)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0xe014051}, 0x20048001) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x0, 0x2, 0x30, @loopback, @mcast2, 0x80, 0x20, 0x80000000, 0x80000000}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x96, 0x2, 0x24f452ea, 0x2, @loopback, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1, 0x40, 0x2, 0x9}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) (async) r10 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000a80)) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x154, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4048050}, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x92d2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 00:24:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8915, &(0x7f0000000640)) 00:24:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:00 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x5, 0x0, 0x1}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x9, 0x7}, 0x10) 00:24:00 executing program 4: r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @bcast, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1ff, 0x7, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x5ab383, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x5ab383, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000280)=0xaa, &(0x7f00000002c0)=0x4) (async) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000280)=0xaa, &(0x7f00000002c0)=0x4) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) close$fd_v4l2_buffer(r2) r3 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={@empty, 0x0, 0x0, 0x20, 0x0, [{}, {@dev}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={@empty, 0x0, 0x0, 0x20, 0x0, [{}, {@dev}]}}) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x4) (async) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x4) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:24:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socketpair(0xa, 0x80000, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbb1fc822a9a"], 0x24}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x404c840) 00:24:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8916, &(0x7f0000000640)) 00:24:00 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0xfffffff7, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x80, 0x8}, 0x10) 00:24:00 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x5, 0x0, 0x1}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x9, 0x7}, 0x10) 00:24:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:24:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socketpair(0xa, 0x80000, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbb1fc822a9a"], 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbb1fc822a9a"], 0x24}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x404c840) 00:24:01 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0xfffffff7, 0x4) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async, rerun: 64) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x80, 0x8}, 0x10) 00:24:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8917, &(0x7f0000000640)) 00:24:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:24:01 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x1, 0x9d, 0x7}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x3, 0x4) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000040), 0x0) 00:24:01 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept$phonet_pipe(r1, 0x0, &(0x7f0000000080)) connect$phonet_pipe(r2, &(0x7f00000000c0)={0x23, 0x8, 0x4, 0x7}, 0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x9, 0x93}, 0x10) 00:24:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:24:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8918, &(0x7f0000000640)) 00:24:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x8000000) r2 = io_uring_setup(0x67c9, &(0x7f0000000080)={0x0, 0xb036, 0x4, 0x0, 0x26d, 0x0, r1}) io_uring_setup(0x3ac1, &(0x7f0000000100)={0x0, 0x5e21, 0x2, 0x3, 0x2d4, 0x0, r2}) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:01 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x1, 0x9d, 0x7}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x3, 0x4) (async) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000040), 0x0) 00:24:01 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept$phonet_pipe(r1, 0x0, &(0x7f0000000080)) connect$phonet_pipe(r2, &(0x7f00000000c0)={0x23, 0x8, 0x4, 0x7}, 0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x9, 0x93}, 0x10) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) (async) ioctl$CAPI_INSTALLED(r0, 0x80024322) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) accept$phonet_pipe(r1, 0x0, &(0x7f0000000080)) (async) connect$phonet_pipe(r2, &(0x7f00000000c0)={0x23, 0x8, 0x4, 0x7}, 0x10) (async) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) (async) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x9, 0x93}, 0x10) (async) 00:24:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x8000000) (async) r2 = io_uring_setup(0x67c9, &(0x7f0000000080)={0x0, 0xb036, 0x4, 0x0, 0x26d, 0x0, r1}) io_uring_setup(0x3ac1, &(0x7f0000000100)={0x0, 0x5e21, 0x2, 0x3, 0x2d4, 0x0, r2}) (async) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:01 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) 00:24:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8919, &(0x7f0000000640)) 00:24:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:01 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x3, 0x8, 0xa}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) 00:24:01 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) 00:24:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) 00:24:01 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x3, 0x8, 0xa}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x2a000) close$fd_v4l2_buffer(r1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:24:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x891a, &(0x7f0000000640)) [ 1450.748074][ T1843] block nbd4: Possible stuck request 000000000fceb2a2: control (read@0,4096B). Runtime 90 seconds [ 1469.459075][T19393] Bluetooth: hci3: command 0x0406 tx timeout 00:24:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x891b, &(0x7f0000000640)) 00:24:30 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x4a, 0x3, 0x4}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x6, 0x1, 0xd0}, 0x10) 00:24:30 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040)=0x5, 0x4) 00:24:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x2a000) close$fd_v4l2_buffer(r1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:24:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:24:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x8000000) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x10000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 00:24:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@local, 0x1, 0x0, 0x20, 0x0, [{@empty}, {@multicast1}]}}) 00:24:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x10, &(0x7f0000000640)) 00:24:31 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x4a, 0x3, 0x4}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x6, 0x1, 0xd0}, 0x10) 00:24:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x8000000) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x10000) (async) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 00:24:31 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040)=0x5, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040)=0x5, 0x4) (async) 00:24:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@local, 0x1, 0x0, 0x20, 0x0, [{@empty}, {@multicast1}]}}) (rerun: 64) 00:24:31 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:24:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:31 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x6, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:24:31 executing program 2: socketpair(0x28, 0x800, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0xffffffff, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/177, 0xb1, 0x9ff97c10c8bdc13f, &(0x7f0000000180)=""/56, 0x38}, &(0x7f0000000200)=0x40) 00:24:31 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:24:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:31 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x6, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:24:31 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xffffffffffffff9a) r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x4, 0xf6, 0x20}, 0x10) 00:24:31 executing program 1: socketpair(0x28, 0x800, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0xffffffff, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/177, 0xb1, 0x9ff97c10c8bdc13f, &(0x7f0000000180)=""/56, 0x38}, &(0x7f0000000200)=0x40) socketpair(0x28, 0x800, 0x1, &(0x7f0000000000)) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0xffffffff, 0x4) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/177, 0xb1, 0x9ff97c10c8bdc13f, &(0x7f0000000180)=""/56, 0x38}, &(0x7f0000000200)=0x40) (async) 00:24:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000002800)={&(0x7f0000002640), 0xc, &(0x7f00000027c0)={&(0x7f00000026c0)={0x14}, 0xfffffdef}}, 0x0) socketpair(0x6, 0x2, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x57}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8d}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) 00:24:31 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x2080) close$fd_v4l2_buffer(r0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7fff, 0x46a003) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000100)={0x0, r3}) 00:24:31 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000240), 0x101, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbb1fc822a9a"], 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) 00:24:31 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xfa, 0x1, 0xff}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:24:31 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0xffffffffffffff9a) (async) r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x4, 0xf6, 0x20}, 0x10) 00:24:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x2080) close$fd_v4l2_buffer(r0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7fff, 0x46a003) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000100)={0x0, r3}) 00:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000002800)={&(0x7f0000002640), 0xc, &(0x7f00000027c0)={&(0x7f00000026c0)={0x14}, 0xfffffdef}}, 0x0) (async) socketpair(0x6, 0x2, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x57}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8d}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) 00:24:31 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000240), 0x101, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x8, 0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbb1fc822a9a"], 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) 00:24:31 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x7, 0x6, 0x8}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 00:24:31 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xfa, 0x1, 0xff}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xfa, 0x1, 0xff}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 00:24:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"b5272c1c23c09e6cea25e628e9eed64e"}}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x1, {0x20, 0x55d7, "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", 0x40, 0x3, 0x0, 0x2, 0xfd, 0xe1, 0x8}, r3}}, 0x128) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000640)) 00:24:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 00:24:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"b5272c1c23c09e6cea25e628e9eed64e"}}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x1, {0x20, 0x55d7, "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", 0x40, 0x3, 0x0, 0x2, 0xfd, 0xe1, 0x8}, r3}}, 0x128) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000640)) 00:24:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x3b7829687796e230, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 00:24:31 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x7, 0x6, 0x8}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 00:24:31 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x7, 0x6, 0x8}, 0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x7, 0x6, 0x8}, 0x10) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) 00:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040810}, 0x200080c1) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbb1fc822a9a"], 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2085}, 0x4041) 00:24:31 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000240)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) 00:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040810}, 0x200080c1) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbb1fc822a9a"], 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2085}, 0x4041) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2085}, 0x4041) 00:24:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) (async) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000240)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) 00:24:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0x3b7829687796e230, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:31 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x8907, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000000)=0x4) 00:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) connect$phonet_pipe(r2, &(0x7f0000000140)={0x23, 0x3f, 0x5, 0x80}, 0x10) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x5, 0xc0, 0x3}, 0x10) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x7, 0xa5, 0x4}, 0x10) 00:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x8907, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000000)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x8907, 0x0) (async) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000000)=0x4) (async) 00:24:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:31 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) [ 1471.726394][ T5057] block nbd1: NBD_DISCONNECT 00:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:31 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 00:24:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:31 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) 00:24:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:24:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) connect$phonet_pipe(r2, &(0x7f0000000140)={0x23, 0x3f, 0x5, 0x80}, 0x10) (async) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x5, 0xc0, 0x3}, 0x10) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x7, 0xa5, 0x4}, 0x10) 00:24:31 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async) [ 1471.844179][ T5079] block nbd3: NBD_DISCONNECT 00:24:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:24:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:31 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4) 00:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x87ed37b3ba66e363, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x2f, 0x5, 0x0, 0xdb, 0x10, @mcast1, @empty, 0x40, 0x7, 0x401, 0x1000}}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000140), 0x80800) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 00:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x87ed37b3ba66e363, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:31 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4) 00:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x2f, 0x5, 0x0, 0xdb, 0x10, @mcast1, @empty, 0x40, 0x7, 0x401, 0x1000}}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000140), 0x80800) (async) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 00:24:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:32 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r1, 0x9}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) 00:24:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:32 executing program 2: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0), 0x4) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000080), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:32 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r1, 0x9}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10000}) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r1, 0x9}) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) (async) 00:24:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000640)) 00:24:32 executing program 1: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:32 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1472.270433][T19393] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1472.277274][T19393] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1472.281306][T19393] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1472.284257][T19393] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1472.287322][T19393] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1472.296510][T19393] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 00:24:32 executing program 3: socketpair(0x28, 0x2, 0x40, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/211, 0xd3, 0x1, &(0x7f0000000680)=""/207, 0xcf}, &(0x7f0000000480)=0x40) r3 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="e538e6623cd759edb8a2dbdf25"], 0x60}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xac, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000801) getsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), &(0x7f0000000040)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="010000ff0f0000000000130000000400018096a4e89b083bcafc74c82ae2ca8821d22dd274dfec61a45f7937d64f62afa73dc9f3562c942aa5c37a26caad1c00"/78], 0x18}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @private2}, r11}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000009c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000a40)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @local, 0x7}, {0xa, 0x4e20, 0x9, @loopback, 0x6}, r12, 0x9}}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x20, 0x9, 0x8, 0x52, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8069, 0x1, 0xfffffff9, 0x7}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, r8, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r14 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r14, 0x10e, 0x8, &(0x7f0000000780)=0xd4, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r14) 00:24:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0), 0x4) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000080), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5421, &(0x7f0000000640)) 00:24:32 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:24:32 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) 00:24:32 executing program 2: socketpair(0x28, 0x2, 0x40, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/211, 0xd3, 0x1, &(0x7f0000000680)=""/207, 0xcf}, &(0x7f0000000480)=0x40) (async) r3 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="e538e6623cd759edb8a2dbdf25"], 0x60}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xac, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000801) getsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), &(0x7f0000000040)=0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="010000ff0f0000000000130000000400018096a4e89b083bcafc74c82ae2ca8821d22dd274dfec61a45f7937d64f62afa73dc9f3562c942aa5c37a26caad1c00"/78], 0x18}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) (async) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @private2}, r11}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000009c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000a40)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @local, 0x7}, {0xa, 0x4e20, 0x9, @loopback, 0x6}, r12, 0x9}}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x20, 0x9, 0x8, 0x52, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8069, 0x1, 0xfffffff9, 0x7}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, r8, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r14, 0x10e, 0x8, &(0x7f0000000780)=0xd4, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r14) 00:24:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:32 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfff, 0x84000) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x3, 0x8, 0x4, 0x1, 0x4, {0x77359400}, {0x5, 0x1, 0xff, 0x0, 0x1, 0x2, "23d3f0be"}, 0x101, 0x4, {}, 0xfffffff7, 0x0, r1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) 00:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2e4, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2d0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x3f, 0x5, "cc742d98ee019747a3dfcedff8b2a24fa2660c49e013f308ecee2d1b513c27e1aa22a4d326dfdd22401c26f9332735e925f40339cd9372f176711b"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*Y#\\}]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f5d355c}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ').[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'//\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x71, 0x5, "67901205475711149a7fe028ca366e4562c32fa251166370f5f822d444a1d3c9d490f0876a0ee90567e80b08ff1a354881f8323ae6542b43ef09f72ef0603ee0050a1f8fd3c56675d60a8402d6ae8233c9c6fb9a4c6f15a6ea1592c3379dd100b231ea9e9c2439f5cb69c365dd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc2, 0x5, "0bf9e0fc2ea9a2c9779b9bb1093367f80707d8e38f86422679569090a708355fef8fe484defe736ef837acfb5b8c908444de2a3c967f139d6811270232ed245663f2410e35b7f893e8e1d2dbf9577fd907ff0092872468be0e39a97b3c56fe4b24eb6013f80be21d04cfafa420769e06f8e49237ec9ee7519e12d45b43e1cbea9850f1385427f919d3f06bd626b337368cf3fdb8c23803c1348e714e5e1f040d96d57032e99434d4d29f3f99c13d34cb8d7b4fb173b60cd09b4845c902c5"}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x80}, 0x200008d4) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa8006400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x38}}, 0x4000000) [ 1472.640064][ T5137] chnl_net:caif_netlink_parms(): no params data found 00:24:32 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 64) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) 00:24:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={@multicast2, 0x1, 0x0, 0x30, 0x0, [{@multicast1}, {@multicast1}, {@initdev}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000440)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x71}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}]}, 0xac}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fc0edf2844697e001400080064756d6d793000000000000000000000054c030000000000080abd955f4b00780b1a6b0ae6945cea112381ba00bc206e1159a6369e2e18"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fffffffffffffff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xf001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xbb}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c011}, 0x4000) [ 1472.701056][ T6103] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1472.705323][ T6103] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 00:24:32 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfff, 0x84000) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x3, 0x8, 0x4, 0x1, 0x4, {0x77359400}, {0x5, 0x1, 0xff, 0x0, 0x1, 0x2, "23d3f0be"}, 0x101, 0x4, {}, 0xfffffff7, 0x0, r1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) [ 1472.709434][ T6103] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1472.723206][ T6103] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1472.725734][ T6103] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1472.727892][ T6103] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1472.763852][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.766096][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.768345][ T5137] bridge_slave_0: entered allmulticast mode [ 1472.771088][ T5137] bridge_slave_0: entered promiscuous mode [ 1472.775740][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.778109][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.781187][ T5137] bridge_slave_1: entered allmulticast mode [ 1472.783554][ T5137] bridge_slave_1: entered promiscuous mode 00:24:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2e4, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2d0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x3f, 0x5, "cc742d98ee019747a3dfcedff8b2a24fa2660c49e013f308ecee2d1b513c27e1aa22a4d326dfdd22401c26f9332735e925f40339cd9372f176711b"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*Y#\\}]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f5d355c}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ').[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'//\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x71, 0x5, "67901205475711149a7fe028ca366e4562c32fa251166370f5f822d444a1d3c9d490f0876a0ee90567e80b08ff1a354881f8323ae6542b43ef09f72ef0603ee0050a1f8fd3c56675d60a8402d6ae8233c9c6fb9a4c6f15a6ea1592c3379dd100b231ea9e9c2439f5cb69c365dd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc2, 0x5, "0bf9e0fc2ea9a2c9779b9bb1093367f80707d8e38f86422679569090a708355fef8fe484defe736ef837acfb5b8c908444de2a3c967f139d6811270232ed245663f2410e35b7f893e8e1d2dbf9577fd907ff0092872468be0e39a97b3c56fe4b24eb6013f80be21d04cfafa420769e06f8e49237ec9ee7519e12d45b43e1cbea9850f1385427f919d3f06bd626b337368cf3fdb8c23803c1348e714e5e1f040d96d57032e99434d4d29f3f99c13d34cb8d7b4fb173b60cd09b4845c902c5"}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x80}, 0x200008d4) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa8006400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x38}}, 0x4000000) 00:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={@multicast2, 0x1, 0x0, 0x30, 0x0, [{@multicast1}, {@multicast1}, {@initdev}]}}) (async, rerun: 64) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000440)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x71}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}]}, 0xac}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fc0edf2844697e001400080064756d6d793000000000000000000000054c030000000000080abd955f4b00780b1a6b0ae6945cea112381ba00bc206e1159a6369e2e18"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fffffffffffffff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xf001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xbb}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c011}, 0x4000) [ 1472.827582][ T5137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 00:24:32 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) [ 1472.844319][ T5137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:24:32 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) [ 1472.874749][ T5137] team0: Port device team_slave_0 added 00:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002180)={&(0x7f0000000040)={0x2}, 0xc, &(0x7f0000002140)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x208, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8a0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002dbd7000fcdbdf250500000005000400e20000000c0016005b08000000000000050004007f00000005001400220000000c000f0008000000000000000c000f00010000000000000008001800ac1414a306001c00ff070000"], 0x60}}, 0x0) [ 1472.884299][ T5137] team0: Port device team_slave_1 added 00:24:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000179176b10d86e2755c25b605934b20a08f7beae683010772f9fe7b11596e9f112fcf1cf6ddb2d49adb78077f2f8ebbc1cad1e48eeeb79ec622a4b2081773b612a20be7a3233a97c422e4a8db611a16e7b63d4f6dc4768150ee4f68c617e42bc0dd3e307a23e5ccf6b5759ad6ba9957ee0fe3a967d8e7dd215d9c866fea8053a6b9946b9629219a72c2c95529e1aaec1a16bb90e1b82f55ddb34974f055d6f89edd29def07b14fd24dc0f5b1b510c695a0200f17627bb7edcf01d4dae4d90615ac557812580f68e42b8a0e58e5529c13d69bd3ab26fc74eed62e2a6af7d32f354c1d04f8254756385365d8707070d0843037beb17d796bc4c26d264a213dd30c84cf40e4232f6e100812b05256634481b22582b4b99841a6ffe2390bd4ff0b310de63534a6dd8350d4a523f7619d627fdb487561d7cd56bb8df8a983f91dcfa44718832660c543f1f52ebebdd9f45a3cc0c14f3f4a06a5bc40c244d710554ccbd8894dcdeedcd864fcca3430d8940adf476", @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf250700000008000b0000000000000000002001000108001900ac1e01011400200020010000000000000000000000000000052200010000f50500f9fffe000000"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x8010) [ 1472.916113][ T5212] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:24:32 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) close$fd_v4l2_buffer(r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:24:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002180)={&(0x7f0000000040)={0x2}, 0xc, &(0x7f0000002140)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x208, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8a0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x24}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002dbd7000fcdbdf250500000005000400e20000000c0016005b08000000000000050004007f00000005001400220000000c000f0008000000000000000c000f00010000000000000008001800ac1414a306001c00ff070000"], 0x60}}, 0x0) (rerun: 32) 00:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf250700000008000b0000000000000000002001000108001900ac1e01011400200020010000000000000000000000000000052200010000f50500f9fffe000000"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x8010) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000179176b10d86e2755c25b605934b20a08f7beae683010772f9fe7b11596e9f112fcf1cf6ddb2d49adb78077f2f8ebbc1cad1e48eeeb79ec622a4b2081773b612a20be7a3233a97c422e4a8db611a16e7b63d4f6dc4768150ee4f68c617e42bc0dd3e307a23e5ccf6b5759ad6ba9957ee0fe3a967d8e7dd215d9c866fea8053a6b9946b9629219a72c2c95529e1aaec1a16bb90e1b82f55ddb34974f055d6f89edd29def07b14fd24dc0f5b1b510c695a0200f17627bb7edcf01d4dae4d90615ac557812580f68e42b8a0e58e5529c13d69bd3ab26fc74eed62e2a6af7d32f354c1d04f8254756385365d8707070d0843037beb17d796bc4c26d264a213dd30c84cf40e4232f6e100812b05256634481b22582b4b99841a6ffe2390bd4ff0b310de63534a6dd8350d4a523f7619d627fdb487561d7cd56bb8df8a983f91dcfa44718832660c543f1f52ebebdd9f45a3cc0c14f3f4a06a5bc40c244d710554ccbd8894dcdeedcd864fcca3430d8940adf476", @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf250700000008000b0000000000000000002001000108001900ac1e01011400200020010000000000000000000000000000052200010000f50500f9fffe000000"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x8010) [ 1473.003605][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1473.006590][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1473.010839][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1473.013780][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1473.016644][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1473.020706][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1473.023596][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1473.026488][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:33 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) [ 1473.036791][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:33 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x20, 0x22, 0x85, {0x85, 0xc, "19f8eeb2e8f1038eadf35bc02ee5343a23c71ee6bdcabc73688f224e0a12b6ce6b784aa911b8c6fe5977ed87982aae6993b3472fd47c4905baa224fc7674222b79862ecf03d7abc90efb3b2b6e81abeb47ca8473e2e8537e180ebb0c902e7a551c9c94efbd0979ff4dbb07d84641779da5993ff5fc1d2f4dbac6ec629b25e4e8d52001"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x0, 0x15, 0x40, "dbe630ef304ae7c9370a11853986dead27511368203561d8cb8d480043641faa0352dcbad6b7ed704bc3410ca29c0b6e84767b3bc2ac5b8a9575b05f8a3beecf"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x9, {0x7, "c14ca9fcc7a685"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x1}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x0, 0x0, 0x30, 0x0, [{@dev}, {@initdev}, {@initdev}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:24:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:24:33 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) [ 1473.169868][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.171910][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.180233][ T5137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.215172][T27540] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.227096][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_1 00:24:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1473.231541][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.248902][ T5137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 00:24:33 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x2, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000680), r3}}, 0x18) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000600)=0x992, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "e66786", "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"}}, 0x110) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r5, 0x7, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x6, {"340c50c284620bbf00ec9bdfaa332e51"}, 0x3, 0x7, 0x10001}, @ib={0x1b, 0x2400, 0x5, {"5ab0ee75eb33d36fddec636885f84454"}, 0x20, 0x4, 0xfffffffffffffffe}}}, 0x118) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, r5}}, 0x30) 00:24:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1473.309515][T27540] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:24:33 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x2010, r0, 0xf6000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 00:24:33 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x2, 0x6}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r3}}, 0x48) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000680), r3}}, 0x18) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000600)=0x992, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "e66786", "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"}}, 0x110) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r5, 0x7, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x6, {"340c50c284620bbf00ec9bdfaa332e51"}, 0x3, 0x7, 0x10001}, @ib={0x1b, 0x2400, 0x5, {"5ab0ee75eb33d36fddec636885f84454"}, 0x20, 0x4, 0xfffffffffffffffe}}}, 0x118) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, r5}}, 0x30) [ 1473.380864][ T5137] hsr_slave_0: entered promiscuous mode [ 1473.389778][ T5137] hsr_slave_1: entered promiscuous mode 00:24:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x2010, r0, 0xf6000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 00:24:33 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) [ 1473.433886][ T5137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1473.436216][ T5137] Cannot create hsr debugfs directory [ 1473.464714][T27540] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.476631][ T5190] chnl_net:caif_netlink_parms(): no params data found 00:24:33 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) 00:24:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1473.546109][T27540] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:24:33 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x0) r1 = io_uring_setup(0x11ac, &(0x7f0000000040)={0x0, 0x5a46, 0x2000, 0x3, 0xed, 0x0, r0}) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0xfffffffffffffda2) io_uring_setup(0x5894, &(0x7f0000000100)={0x0, 0x3515, 0x4, 0x1, 0x2b4, 0x0, r1}) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x5, 0x5, 0x1}, 0x10) 00:24:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:24:33 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x0) r1 = io_uring_setup(0x11ac, &(0x7f0000000040)={0x0, 0x5a46, 0x2000, 0x3, 0xed, 0x0, r0}) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0xfffffffffffffda2) (async) io_uring_setup(0x5894, &(0x7f0000000100)={0x0, 0x3515, 0x4, 0x1, 0x2b4, 0x0, r1}) (async) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x5, 0x5, 0x1}, 0x10) 00:24:33 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x80000000, 0x4) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1473.633248][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.636661][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.638866][ T5190] bridge_slave_0: entered allmulticast mode [ 1473.641048][ T5190] bridge_slave_0: entered promiscuous mode [ 1473.647223][ T5190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.649365][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.651504][ T5190] bridge_slave_1: entered allmulticast mode [ 1473.653783][ T5190] bridge_slave_1: entered promiscuous mode 00:24:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:33 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1f, 0x9, 0xff}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000080), 0x800) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000040)=0x2) 00:24:33 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x80000000, 0x4) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:33 executing program 0: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x20, 0x22, 0x85, {0x85, 0xc, "19f8eeb2e8f1038eadf35bc02ee5343a23c71ee6bdcabc73688f224e0a12b6ce6b784aa911b8c6fe5977ed87982aae6993b3472fd47c4905baa224fc7674222b79862ecf03d7abc90efb3b2b6e81abeb47ca8473e2e8537e180ebb0c902e7a551c9c94efbd0979ff4dbb07d84641779da5993ff5fc1d2f4dbac6ec629b25e4e8d52001"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x0, 0x15, 0x40, "dbe630ef304ae7c9370a11853986dead27511368203561d8cb8d480043641faa0352dcbad6b7ed704bc3410ca29c0b6e84767b3bc2ac5b8a9575b05f8a3beecf"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x9, {0x7, "c14ca9fcc7a685"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x1}}) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x0, 0x0, 0x30, 0x0, [{@dev}, {@initdev}, {@initdev}]}}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 1473.752000][ T5137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.764205][ T5190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.769309][ T5190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:24:33 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1f, 0x9, 0xff}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000080), 0x800) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000040)=0x2) 00:24:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) [ 1473.825165][ T5190] team0: Port device team_slave_0 added [ 1473.849060][ T5137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:24:33 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) [ 1473.872892][ T5190] team0: Port device team_slave_1 added 00:24:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) mmap$dsp(&(0x7f0000fd5000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1473.926057][ T5137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:24:33 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x1) connect$phonet_pipe(r0, &(0x7f0000000100)={0x23, 0x1, 0x40, 0x6}, 0x10) 00:24:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) mmap$dsp(&(0x7f0000fd5000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1473.954839][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.956702][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.974523][ T5190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 00:24:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@remote, 0x1, 0x0, 0x27, 0x0, [{@remote}, {@multicast2}, {@empty}, {@multicast1}, {@dev}, {@multicast2}]}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 1474.008949][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.010826][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.017758][ T5190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 00:24:34 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5e0ad67d56e994fe, 0x13, r0, 0x180000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x62012, r0, 0x80000000) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r0, 0x180000000) 00:24:34 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x1) (async) connect$phonet_pipe(r0, &(0x7f0000000100)={0x23, 0x1, 0x40, 0x6}, 0x10) [ 1474.075225][ T5137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:24:34 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5e0ad67d56e994fe, 0x13, r0, 0x180000000) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x62012, r0, 0x80000000) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) (async) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r0, 0x180000000) [ 1474.121950][ T5190] hsr_slave_0: entered promiscuous mode 00:24:34 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@remote, 0x1, 0x0, 0x27, 0x0, [{@remote}, {@multicast2}, {@empty}, {@multicast1}, {@dev}, {@multicast2}]}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 1474.159147][ T5190] hsr_slave_1: entered promiscuous mode [ 1474.180302][ T5190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1474.186601][ T5190] Cannot create hsr debugfs directory 00:24:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x38, r3, 0x1, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4050}, 0x4004811) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:34 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:34 executing program 2: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x100000c, 0x10, r1, 0x100000000) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x180000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) 00:24:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x38, r3, 0x1, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4050}, 0x4004811) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:34 executing program 3: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x100000c, 0x10, r1, 0x100000000) (async) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x180000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) [ 1474.338802][ T6103] Bluetooth: hci7: command 0x0409 tx timeout 00:24:34 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000001f00), r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x401}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x3c}}, 0x0) 00:24:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:34 executing program 0: munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) [ 1474.500459][ T5137] netdevsim netdevsim4 netdevsim0: renamed from eth0 00:24:34 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x2a440) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={@multicast1, 0x0, 0x0, 0x80, 0x0, [{@remote}, {@loopback}, {@broadcast}, {@multicast2}, {@private}, {@remote}, {@empty}, {@loopback}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x401c5820, &(0x7f0000000640)) 00:24:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x80, 0x0, [{@empty}, {}, {@multicast1}, {@broadcast}, {@initdev}, {@remote}, {@initdev}, {@multicast2}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socket$inet_udplite(0x2, 0x2, 0x88) [ 1474.554383][ T5137] netdevsim netdevsim4 netdevsim1: renamed from eth1 00:24:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000001f00), r1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001f00), r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x401}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x3c}}, 0x0) [ 1474.624384][ T5137] netdevsim netdevsim4 netdevsim2: renamed from eth2 00:24:34 executing program 2: munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x80, 0x0, [{@empty}, {}, {@multicast1}, {@broadcast}, {@initdev}, {@remote}, {@initdev}, {@multicast2}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x80, 0x0, [{@empty}, {}, {@multicast1}, {@broadcast}, {@initdev}, {@remote}, {@initdev}, {@multicast2}]}}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) [ 1474.664847][ T5137] netdevsim netdevsim4 netdevsim3: renamed from eth3 00:24:34 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x2a440) socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={@multicast1, 0x0, 0x0, 0x80, 0x0, [{@remote}, {@loopback}, {@broadcast}, {@multicast2}, {@private}, {@remote}, {@empty}, {@loopback}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={@multicast1, 0x0, 0x0, 0x80, 0x0, [{@remote}, {@loopback}, {@broadcast}, {@multicast2}, {@private}, {@remote}, {@empty}, {@loopback}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x401c5820, &(0x7f0000000640)) 00:24:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="64010101000000000000ac1e0000000000000000000000000000d8f98b0884d2ee088f1a70ceca7bb5dd3f63bd73b849cabc8ceb425156ebed3fd3776ea45fa00c3d498a98453f73931495cede4c06934be271b1000000000000"]}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000000c0)={@empty, 0x1, 0x0, 0x40, 0x0, [{@broadcast}, {@multicast2}, {@dev}, {@private}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="220029bd7000ffdb800000005e830500120003000000080011000000000008005317a5da738996530f0e7c98ef74a861ab678c412f9883cc38", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) 00:24:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="64010101000000000000ac1e0000000000000000000000000000d8f98b0884d2ee088f1a70ceca7bb5dd3f63bd73b849cabc8ceb425156ebed3fd3776ea45fa00c3d498a98453f73931495cede4c06934be271b1000000000000"]}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000000c0)={@empty, 0x1, 0x0, 0x40, 0x0, [{@broadcast}, {@multicast2}, {@dev}, {@private}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000000c0)={@empty, 0x1, 0x0, 0x40, 0x0, [{@broadcast}, {@multicast2}, {@dev}, {@private}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000088", @ANYRES16=r2, @ANYBLOB="00042bbd7000fedbdf2507000000050006000800000005000700030000000800110000000000060003001ef000000500040002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x80) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1474.818873][ T6103] Bluetooth: hci8: command 0x0409 tx timeout 00:24:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:34 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000088", @ANYRES16=r2, @ANYBLOB="00042bbd7000fedbdf2507000000050006000800000005000700030000000800110000000000060003001ef000000500040002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x80) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="220029bd7000ffdb800000005e830500120003000000080011000000000008005317a5da738996530f0e7c98ef74a861ab678c412f9883cc38", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="220029bd7000ffdb800000005e830500120003000000080011000000000008005317a5da738996530f0e7c98ef74a861ab678c412f9883cc38", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) 00:24:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0xd4d01eaa371e5947}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4893}, 0x40000c1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 00:24:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@empty, 0x0, 0x0, 0x40, 0x0, [{@local}, {@empty}, {@remote}, {@loopback}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1474.990422][ T5137] 8021q: adding VLAN 0 to HW filter on device bond0 00:24:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1475.029355][ T5137] 8021q: adding VLAN 0 to HW filter on device team0 00:24:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0xd4d01eaa371e5947}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4893}, 0x40000c1) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 00:24:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@empty, 0x0, 0x0, 0x40, 0x0, [{@local}, {@empty}, {@remote}, {@loopback}]}}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1475.084225][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.086159][ T6249] bridge0: port 1(bridge_slave_0) entered forwarding state 00:24:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) [ 1475.100972][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.102953][ T6249] bridge0: port 2(bridge_slave_1) entered forwarding state 00:24:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f0000000040)) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff00000100"/18]}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:35 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) 00:24:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) [ 1475.229694][ T5137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1475.232390][ T5137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 00:24:35 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) 00:24:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5450, &(0x7f0000000640)) 00:24:35 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x41, 0xd}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xe1, 0x2a, 0x20}, 0x10) 00:24:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socketpair(0xf, 0x5, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:24:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bf25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x4000040) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 00:24:35 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x41, 0xd}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xe1, 0x2a, 0x20}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x81, 0x41, 0xd}, 0x10) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xe1, 0x2a, 0x20}, 0x10) (async) [ 1475.363056][ T5190] netdevsim netdevsim1 netdevsim0: renamed from eth0 00:24:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f0000000040)) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff00000100"/18]}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socketpair(0xf, 0x5, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) socketpair(0xf, 0x5, 0x9, &(0x7f0000000080)) (async) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) [ 1475.404562][ T5190] netdevsim netdevsim1 netdevsim1: renamed from eth1 00:24:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bf25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x4000040) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 00:24:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x11}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2e}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40890) r2 = socket$netlink(0x10, 0x3, 0x12) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xba, 0x0, 0x7ff, 0x12, @dev={0xfe, 0x80, '\x00', 0x35}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x30, 0x0, 0x5f, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x1f, 0x20, 0x8, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00', 0x40, 0x0, 0x0, 0x3}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x48, 0x72, 0x2, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x7800, 0x8000, 0x9, 0x2}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000680)={&(0x7f0000000200), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8c5}, 0x4) 00:24:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@multicast1, 0x1, 0x0, 0x20, 0x0, [{@broadcast}, {@private}]}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, 0x0, 0x0, 0x60, 0x0, [{@multicast2}, {}, {@dev}, {}, {}, {@remote}]}}) 00:24:35 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1475.534284][ T5190] netdevsim netdevsim1 netdevsim2: renamed from eth2 00:24:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x11}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2e}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40890) (async) r2 = socket$netlink(0x10, 0x3, 0x12) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xba, 0x0, 0x7ff, 0x12, @dev={0xfe, 0x80, '\x00', 0x35}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x30, 0x0, 0x5f, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x1f, 0x20, 0x8, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00', 0x40, 0x0, 0x0, 0x3}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x48, 0x72, 0x2, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x7800, 0x8000, 0x9, 0x2}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000680)={&(0x7f0000000200), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8c5}, 0x4) 00:24:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@private=0xa010100, 0x1, 0x0, 0x20, 0x0, [{@private}, {@private}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 1475.578528][ T5190] netdevsim netdevsim1 netdevsim3: renamed from eth3 00:24:35 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), &(0x7f0000000040)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)="e8968af9ee99857dd534", 0xa, r0}, 0x68) 00:24:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@multicast1, 0x1, 0x0, 0x20, 0x0, [{@broadcast}, {@private}]}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, 0x0, 0x0, 0x60, 0x0, [{@multicast2}, {}, {@dev}, {}, {}, {@remote}]}}) 00:24:35 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000180)=0x80, 0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) r1 = accept4$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x100000) accept$phonet_pipe(r1, 0x0, &(0x7f0000000140)) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080), 0x4) connect$phonet_pipe(r0, &(0x7f0000000100)={0x23, 0x1, 0xff, 0x4}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@private=0xa010100, 0x1, 0x0, 0x20, 0x0, [{@private}, {@private}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@private=0xa010100, 0x1, 0x0, 0x20, 0x0, [{@private}, {@private}]}}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) [ 1475.746532][T27540] hsr_slave_0: left promiscuous mode [ 1475.789089][T27540] hsr_slave_1: left promiscuous mode [ 1475.869111][T27540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1475.871106][T27540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.880172][T27540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1475.885175][T27540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.896870][T27540] bridge_slave_1: left allmulticast mode [ 1475.898898][T27540] bridge_slave_1: left promiscuous mode [ 1475.902516][T27540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.946010][T27540] bridge_slave_0: left allmulticast mode [ 1475.947454][T27540] bridge_slave_0: left promiscuous mode [ 1475.949516][T27540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.088907][T27540] veth1_macvtap: left promiscuous mode [ 1476.090397][T27540] veth0_macvtap: left promiscuous mode [ 1476.091926][T27540] veth1_vlan: left promiscuous mode [ 1476.093364][T27540] veth0_vlan: left promiscuous mode [ 1476.264232][T27540] team0 (unregistering): Port device team_slave_1 removed [ 1476.277431][T27540] team0 (unregistering): Port device team_slave_0 removed [ 1476.286021][T27540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.327727][T27540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1476.419624][ T6103] Bluetooth: hci7: command 0x041b tx timeout [ 1476.443677][T27540] bond0 (unregistering): Released all slaves [ 1476.569364][ T5137] 8021q: adding VLAN 0 to HW filter on device batadv0 00:24:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async, rerun: 32) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), &(0x7f0000000040)=0x4) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)="e8968af9ee99857dd534", 0xa, r0}, 0x68) 00:24:36 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x20, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xaab2, 0x60202) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 00:24:36 executing program 3: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x100000) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:36 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000180)=0x80, 0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) r1 = accept4$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x100000) accept$phonet_pipe(r1, 0x0, &(0x7f0000000140)) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080), 0x4) connect$phonet_pipe(r0, &(0x7f0000000100)={0x23, 0x1, 0xff, 0x4}, 0x10) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (rerun: 64) [ 1476.650781][ T5190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.681258][ T5190] 8021q: adding VLAN 0 to HW filter on device team0 00:24:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1476.699920][T24080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.701825][T24080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.704589][T24080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.706538][T24080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.730199][ T5531] block nbd3: shutting down sockets 00:24:36 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x20, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xaab2, 0x60202) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 00:24:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) [ 1476.804124][ T5190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 00:24:36 executing program 3: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x100000) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1476.806982][ T5190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 00:24:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000200)="4ae99d571ee9da706af82c1b630f3f4427aa2b8c80874d08a3081b85850902dab5008c9ace6d9834b573f760cbc3b425e7d223c710c35dfb573faa6502933915dceadc33aba21f8ccc72f94be50cfdb1480e8de0d9ca8040c770c22a22cbc131de097607838fb68614c48b3c09919a2eff3d2e21b4e8baea5789936ecc39249661c330195a4fa561e8bab207b2f643d8db71fbad3fc7cff428636809e8718d3777f72a2f43fc087f42ac5956e5d4dbc6d0d96be48bc241ecd5cea9145a2d", 0xbe, r0}, 0x68) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x1d, 0x6, 0x22, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 1476.893878][ T5552] block nbd3: shutting down sockets [ 1476.898901][ T6103] Bluetooth: hci8: command 0x041b tx timeout 00:24:36 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1476.947387][ T5137] veth0_vlan: entered promiscuous mode 00:24:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1476.971770][ T5137] veth1_vlan: entered promiscuous mode 00:24:36 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 1477.013991][ T5137] veth0_macvtap: entered promiscuous mode [ 1477.017637][ T5137] veth1_macvtap: entered promiscuous mode 00:24:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000200)="4ae99d571ee9da706af82c1b630f3f4427aa2b8c80874d08a3081b85850902dab5008c9ace6d9834b573f760cbc3b425e7d223c710c35dfb573faa6502933915dceadc33aba21f8ccc72f94be50cfdb1480e8de0d9ca8040c770c22a22cbc131de097607838fb68614c48b3c09919a2eff3d2e21b4e8baea5789936ecc39249661c330195a4fa561e8bab207b2f643d8db71fbad3fc7cff428636809e8718d3777f72a2f43fc087f42ac5956e5d4dbc6d0d96be48bc241ecd5cea9145a2d", 0xbe, r0}, 0x68) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) socketpair(0x1d, 0x6, 0x22, &(0x7f00000000c0)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5451, &(0x7f0000000640)) [ 1477.066536][ T5190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.072839][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.075638][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.078214][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.097220][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:24:37 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1477.112706][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.115464][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:24:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@multicast2, 0x0, 0x0, 0x30, 0x0, [{@empty}, {@multicast1}, {@multicast1}]}}) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:24:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1477.118024][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.134664][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.137853][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.142682][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.145470][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.148408][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.153269][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1477.176935][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.180493][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.185462][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 00:24:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1477.200622][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.203405][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.206050][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.218002][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.221446][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.224112][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.227061][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.229873][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.232713][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:24:37 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) [ 1477.237803][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_1 00:24:37 executing program 2: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@multicast1, 0x0, 0x0, 0x30, 0x0, [{@dev}, {@loopback}, {@dev}]}}) 00:24:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1}}) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@multicast2, 0x0, 0x0, 0x30, 0x0, [{@empty}, {@multicast1}, {@multicast1}]}}) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 1477.322565][ T5137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.325098][ T5137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 00:24:37 executing program 3: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@multicast1, 0x0, 0x0, 0x30, 0x0, [{@dev}, {@loopback}, {@dev}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@multicast1, 0x0, 0x0, 0x30, 0x0, [{@dev}, {@loopback}, {@dev}]}}) [ 1477.327201][ T5137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.337073][ T5137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:24:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044044}, 0x0) [ 1477.347784][ T5190] veth0_vlan: entered promiscuous mode 00:24:37 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) [ 1477.383120][ T5190] veth1_vlan: entered promiscuous mode 00:24:37 executing program 3: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1477.416425][ T5190] veth0_macvtap: entered promiscuous mode 00:24:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r2, 0x40049409, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) [ 1477.449787][ T5190] veth1_macvtap: entered promiscuous mode 00:24:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044044}, 0x0) [ 1477.484862][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:24:37 executing program 2: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:37 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, &(0x7f0000000280)="4ae82d5be1796d3c1dbdcb547155cbe53a8b81b4a13258c66ae126cc00245deebbc997e8b02d8ad949a6a1ff94adc70f478a9e6a821f175a8a834d549e8f747a1827c215f0cd5f1dc63d9ba3441628079cc7f730026699c1eb11da24e8e2fbfd273f", 0x62, 0x4048011, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7ff, 0x400) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) [ 1477.508654][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.511637][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.514633][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.517234][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.529665][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.532492][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.535199][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.537803][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.549909][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.556357][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.564525][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.570684][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:24:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r2 = userfaultfd(0x801) (rerun: 32) ioctl$UFFDIO_COPY(r2, 0x40049409, 0x0) (async) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) 00:24:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1477.584724][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.600121][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1477.623645][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.626425][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.627109][ T2250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1477.638768][ T2250] ieee802154 phy1 wpan1: encryption failed: -22 00:24:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002000000048000000000000000b113a9b91e67256605007d4b36c786decf0005000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000ffffffff00000000e9b36c980000000000000000000000000000000000000000ac1e0000000000000008000000090bfb5c221f0000fe00005098c462f80ebec414acf29eb8c06de137"]}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) [ 1477.640449][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 00:24:37 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, &(0x7f0000000280)="4ae82d5be1796d3c1dbdcb547155cbe53a8b81b4a13258c66ae126cc00245deebbc997e8b02d8ad949a6a1ff94adc70f478a9e6a821f175a8a834d549e8f747a1827c215f0cd5f1dc63d9ba3441628079cc7f730026699c1eb11da24e8e2fbfd273f", 0x62, 0x4048011, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) syz_open_dev$vcsa(&(0x7f0000000000), 0x7ff, 0x400) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7ff, 0x400) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) [ 1477.651889][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.654627][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.657397][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.676916][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.680219][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.684069][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.690176][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.696450][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.700801][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.705106][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1477.708020][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:24:37 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1477.718187][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1477.729361][T27538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.731484][T27538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:24:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1477.757046][ T5190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.765904][ T5190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 00:24:37 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x4, 0x3, 0x3}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:37 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x303000, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000200)) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) close$fd_v4l2_buffer(r1) close$fd_v4l2_buffer(r1) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000180)=0x252, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)="b154b002c3d160f2a8809d0682f3e5265ad5c0274a37cafe6b5eb09244f090954ff496ab55c22b7761ec8fe68649cd94c822002f065a4db2de91bcb85d2353dc59fbda75630d935fbbce886b95e9c5b8c3b2adae46675ca3efe123e465747ce631cd43a111059ce5f72d896cc44a129a06c70e13fd53431330f0b9fb61b4c524fc4ec464fdfeedab0bf1b7a90a86cc5306c835bd4fcdc83bbc78dd00edee62c96f3f82077fce8aeb437cbbbf155fe09a3e7538122f62c81744d79a3c20565740f4c8217a4426a4cf4e706e67680932eab81124", 0xd3, r3}, 0x68) connect$phonet_pipe(r2, &(0x7f0000000240)={0x23, 0x3f, 0x0, 0x8}, 0x10) [ 1477.791728][ T5190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.794171][ T5190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:24:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002000000048000000000000000b113a9b91e67256605007d4b36c786decf0005000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000ffffffff00000000e9b36c980000000000000000000000000000000000000000ac1e0000000000000008000000090bfb5c221f0000fe00005098c462f80ebec414acf29eb8c06de137"]}) (async) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) 00:24:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1477.875412][ T6248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.877614][ T6248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:24:37 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x4, 0x3, 0x3}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:37 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x303000, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000200)) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) close$fd_v4l2_buffer(r1) close$fd_v4l2_buffer(r1) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000180)=0x252, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)="b154b002c3d160f2a8809d0682f3e5265ad5c0274a37cafe6b5eb09244f090954ff496ab55c22b7761ec8fe68649cd94c822002f065a4db2de91bcb85d2353dc59fbda75630d935fbbce886b95e9c5b8c3b2adae46675ca3efe123e465747ce631cd43a111059ce5f72d896cc44a129a06c70e13fd53431330f0b9fb61b4c524fc4ec464fdfeedab0bf1b7a90a86cc5306c835bd4fcdc83bbc78dd00edee62c96f3f82077fce8aeb437cbbbf155fe09a3e7538122f62c81744d79a3c20565740f4c8217a4426a4cf4e706e67680932eab81124", 0xd3, r3}, 0x68) connect$phonet_pipe(r2, &(0x7f0000000240)={0x23, 0x3f, 0x0, 0x8}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x303000, 0x0) (async) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000200)) (async) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) (async) close$fd_v4l2_buffer(r1) (async) close$fd_v4l2_buffer(r1) (async) ioctl$RTC_PIE_ON(r1, 0x7005) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) (async) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000180)=0x252, 0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)="b154b002c3d160f2a8809d0682f3e5265ad5c0274a37cafe6b5eb09244f090954ff496ab55c22b7761ec8fe68649cd94c822002f065a4db2de91bcb85d2353dc59fbda75630d935fbbce886b95e9c5b8c3b2adae46675ca3efe123e465747ce631cd43a111059ce5f72d896cc44a129a06c70e13fd53431330f0b9fb61b4c524fc4ec464fdfeedab0bf1b7a90a86cc5306c835bd4fcdc83bbc78dd00edee62c96f3f82077fce8aeb437cbbbf155fe09a3e7538122f62c81744d79a3c20565740f4c8217a4426a4cf4e706e67680932eab81124", 0xd3, r3}, 0x68) (async) connect$phonet_pipe(r2, &(0x7f0000000240)={0x23, 0x3f, 0x0, 0x8}, 0x10) (async) [ 1477.934198][T27530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 00:24:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1477.936503][T27530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:24:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x891b, &(0x7f0000000640)) [ 1477.970480][ T6244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.972717][ T6244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:24:37 executing program 3: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @rose, @rose, @rose, @netrom, @default, @default]}, &(0x7f00000000c0)=0x48, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @bcast, @netrom={'nr', 0x0}, 0x8, 'syz1\x00', @bcast, 0x10001, 0x4, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$netrom(r0, &(0x7f0000000240)="d5c1ed4a6f6e8656a9fc823effc19bcf09a0165096d7f575ff04ae1faece", 0x1e, 0x4000840, 0x0, 0x0) accept$netrom(r0, &(0x7f00000002c0)={{0x3, @default}, [@remote, @default, @bcast, @null, @bcast, @netrom, @remote, @rose]}, &(0x7f0000000340)=0x48) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000180)=0x8000, 0x4) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0xfffffffb, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 00:24:38 executing program 1: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:38 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x5a, 0x3}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0xec, 0x7, 0x2}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x1, 0x6b, 0x1}, 0x10) 00:24:38 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) 00:24:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:38 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:38 executing program 4: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @rose, @rose, @rose, @netrom, @default, @default]}, &(0x7f00000000c0)=0x48, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @bcast, @netrom={'nr', 0x0}, 0x8, 'syz1\x00', @bcast, 0x10001, 0x4, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$netrom(r0, &(0x7f0000000240)="d5c1ed4a6f6e8656a9fc823effc19bcf09a0165096d7f575ff04ae1faece", 0x1e, 0x4000840, 0x0, 0x0) accept$netrom(r0, &(0x7f00000002c0)={{0x3, @default}, [@remote, @default, @bcast, @null, @bcast, @netrom, @remote, @rose]}, &(0x7f0000000340)=0x48) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000180)=0x8000, 0x4) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0xfffffffb, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @rose, @rose, @rose, @netrom, @default, @default]}, &(0x7f00000000c0)=0x48, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @bcast, @netrom={'nr', 0x0}, 0x8, 'syz1\x00', @bcast, 0x10001, 0x4, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendto$netrom(r0, &(0x7f0000000240)="d5c1ed4a6f6e8656a9fc823effc19bcf09a0165096d7f575ff04ae1faece", 0x1e, 0x4000840, 0x0, 0x0) (async) accept$netrom(r0, &(0x7f00000002c0)={{0x3, @default}, [@remote, @default, @bcast, @null, @bcast, @netrom, @remote, @rose]}, &(0x7f0000000340)=0x48) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) (async) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000180)=0x8000, 0x4) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0xfffffffb, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) 00:24:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x891c, &(0x7f0000000640)) 00:24:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) 00:24:38 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:38 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:38 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x5a, 0x3}, 0x10) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0xec, 0x7, 0x2}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x1, 0x6b, 0x1}, 0x10) 00:24:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x30, 0x0, [{@multicast1}, {@dev}, {@multicast2}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:38 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4080) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004010) 00:24:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), &(0x7f0000000040)=0xffffffffffffff19) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:38 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x1b) r2 = accept4$phonet_pipe(r0, &(0x7f0000000140), &(0x7f0000000080)=0x10, 0x800) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:24:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x30, 0x0, [{@multicast1}, {@dev}, {@multicast2}]}}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8933, &(0x7f0000000640)) 00:24:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4080) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004010) 00:24:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), &(0x7f0000000040)=0xffffffffffffff19) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000069b213a36cc3a59962fa109a879ab9fa864f59132c89b88703d6b051234cf4d6307ca98c8d0fe35fb3db321085ca9dd3b950fd996fa6a254b930741b076c46ff2d3481b670dfc44247cf198c580a004a4c36286c24f91dccb402aeff636ea488f7cb954b7f028b2828dcd60ef17f823659dece206b3f38e0ebb8730677bc7c4221472c1eef54fafe0c2fce0f76388916646da0f05754c6eeca470599245e799ea729b6360492", @ANYRES16, @ANYBLOB="020069bd0400fbdbdf250500000006001c000300"/30], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004890) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) 00:24:38 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x1b) (async, rerun: 32) r2 = accept4$phonet_pipe(r0, &(0x7f0000000140), &(0x7f0000000080)=0x10, 0x800) (rerun: 32) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:24:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 00:24:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000069b213a36cc3a59962fa109a879ab9fa864f59132c89b88703d6b051234cf4d6307ca98c8d0fe35fb3db321085ca9dd3b950fd996fa6a254b930741b076c46ff2d3481b670dfc44247cf198c580a004a4c36286c24f91dccb402aeff636ea488f7cb954b7f028b2828dcd60ef17f823659dece206b3f38e0ebb8730677bc7c4221472c1eef54fafe0c2fce0f76388916646da0f05754c6eeca470599245e799ea729b6360492", @ANYRES16, @ANYBLOB="020069bd0400fbdbdf250500000006001c000300"/30], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004890) (async, rerun: 64) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 64) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) [ 1478.508963][ T6103] Bluetooth: hci7: command 0x040f tx timeout 00:24:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) 00:24:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8934, &(0x7f0000000640)) 00:24:38 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 00:24:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1}}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) 00:24:38 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) connect$phonet_pipe(r0, 0x0, 0x0) write$snapshot(r0, &(0x7f0000000000)="d0b5cb0bae4faf43c42ec845d9a1d6520ef620279bfc13ce8bcd509f2ce20ac92e8d9581fe3b5ff2dac205ce7cd60fb82ad8726e5959d403ba7444d91ecd6e72f6d0712df9b32064447b505b662488a1aa1e837f13f4d9914a5817c26612240239e31457dd6d6d373739812456a4b1c9393153fdffb71a50928379d7a329abbfa37fe77781415fce839c5afc1127", 0x8e) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000229ff03000000000000000000050006000300000006001b004e2200000800090000000000"], 0x2c}}, 0x8000) ioctl$SNAPSHOT_FREE(r0, 0x3305) 00:24:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) 00:24:38 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f00000000c0)) 00:24:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1}}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1}}, 0x18) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) (async) 00:24:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) connect$phonet_pipe(r0, 0x0, 0x0) write$snapshot(r0, &(0x7f0000000000)="d0b5cb0bae4faf43c42ec845d9a1d6520ef620279bfc13ce8bcd509f2ce20ac92e8d9581fe3b5ff2dac205ce7cd60fb82ad8726e5959d403ba7444d91ecd6e72f6d0712df9b32064447b505b662488a1aa1e837f13f4d9914a5817c26612240239e31457dd6d6d373739812456a4b1c9393153fdffb71a50928379d7a329abbfa37fe77781415fce839c5afc1127", 0x8e) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000229ff03000000000000000000050006000300000006001b004e2200000800090000000000"], 0x2c}}, 0x8000) ioctl$SNAPSHOT_FREE(r0, 0x3305) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) (async) connect$phonet_pipe(r0, 0x0, 0x0) (async) write$snapshot(r0, &(0x7f0000000000)="d0b5cb0bae4faf43c42ec845d9a1d6520ef620279bfc13ce8bcd509f2ce20ac92e8d9581fe3b5ff2dac205ce7cd60fb82ad8726e5959d403ba7444d91ecd6e72f6d0712df9b32064447b505b662488a1aa1e837f13f4d9914a5817c26612240239e31457dd6d6d373739812456a4b1c9393153fdffb71a50928379d7a329abbfa37fe77781415fce839c5afc1127", 0x8e) (async) ioctl$SNAPSHOT_FREE(r0, 0x3305) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000229ff03000000000000000000050006000300000006001b004e2200000800090000000000"], 0x2c}}, 0x8000) (async) ioctl$SNAPSHOT_FREE(r0, 0x3305) (async) 00:24:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8935, &(0x7f0000000640)) 00:24:38 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) 00:24:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x64, 0x0, 0x0) 00:24:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2100010000000000fcff06"], 0x28}}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1f, 0xc2000) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xccd}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x44000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, r7, 0x2, 0x70bd2a, 0x25dfdbfa, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x20020000}, 0x4000040) 00:24:38 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:24:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x64, 0x0, 0x0) [ 1478.929695][ T5794] __nla_validate_parse: 26 callbacks suppressed [ 1478.929711][ T5794] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 00:24:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) [ 1478.985950][ T6103] Bluetooth: hci8: command 0x040f tx timeout 00:24:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8940, &(0x7f0000000640)) 00:24:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 00:24:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000640)) 00:24:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x64, 0x0, 0x0) 00:24:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) (async) 00:24:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x20, 0x0, [{@initdev}, {@empty}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8941, &(0x7f0000000640)) 00:24:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2100010000000000fcff06"], 0x28}}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1f, 0xc2000) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xccd}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004) (async) r6 = socket$netlink(0x10, 0x3, 0xc) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x44000) (async, rerun: 32) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, r7, 0x2, 0x70bd2a, 0x25dfdbfa, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x20020000}, 0x4000040) 00:24:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5460, &(0x7f0000000640)) 00:24:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x20, 0x0, [{@initdev}, {@empty}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x20, 0x0, [{@initdev}, {@empty}]}}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) 00:24:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x894c, &(0x7f0000000640)) 00:24:39 executing program 0: r0 = inotify_init1(0x80000) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(r0, r1) inotify_rm_watch(r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) 00:24:39 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:24:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8901, &(0x7f0000000640)) 00:24:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8953, &(0x7f0000000640)) 00:24:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 00:24:39 executing program 3: r0 = inotify_init1(0x80000) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(r0, r1) inotify_rm_watch(r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) 00:24:39 executing program 4: r0 = inotify_init1(0x80000) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) inotify_rm_watch(r0, r1) inotify_rm_watch(r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) inotify_init1(0x80000) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000000) (async) inotify_rm_watch(r0, r1) (async) inotify_rm_watch(r0, r1) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) (async) 00:24:39 executing program 2: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose}, [@null, @remote, @netrom, @default, @rose, @bcast, @bcast, @default]}, &(0x7f0000000180)=0x48) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000001c0)=0x5, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) close$fd_v4l2_buffer(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000f00)={&(0x7f00000004c0), 0xc, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:24:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8954, &(0x7f0000000640)) 00:24:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) 00:24:39 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:24:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8902, &(0x7f0000000640)) 00:24:39 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0xfffffffffffffffc, 0x400440) 00:24:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, 0x0, 0xc0) 00:24:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={0x0}, 0x1, 0x0, 0x34000}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) 00:24:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8955, &(0x7f0000000640)) 00:24:39 executing program 2: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose}, [@null, @remote, @netrom, @default, @rose, @bcast, @bcast, @default]}, &(0x7f0000000180)=0x48) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000001c0)=0x5, 0x4) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) close$fd_v4l2_buffer(r2) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) (async) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000f00)={&(0x7f00000004c0), 0xc, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) (async) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:24:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8903, &(0x7f0000000640)) 00:24:39 executing program 4: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x800) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x9, 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) socketpair(0x2a, 0x4, 0x4, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$netrom(r3, &(0x7f0000000080)={{0x3, @null}, [@bcast, @remote, @default, @rose, @netrom, @netrom, @rose, @netrom]}, &(0x7f0000000100)=0x48) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) accept$netrom(r1, 0x0, &(0x7f0000000040)) 00:24:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8982, &(0x7f0000000640)) 00:24:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={0x0}, 0x1, 0x0, 0x34000}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) 00:24:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, 0x0, 0xc0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, 0x0, 0xc0) 00:24:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8983, &(0x7f0000000640)) 00:24:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8904, &(0x7f0000000640)) 00:24:39 executing program 2: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x800) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x9, 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) socketpair(0x2a, 0x4, 0x4, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$netrom(r3, &(0x7f0000000080)={{0x3, @null}, [@bcast, @remote, @default, @rose, @netrom, @netrom, @rose, @netrom]}, &(0x7f0000000100)=0x48) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) accept$netrom(r1, 0x0, &(0x7f0000000040)) 00:24:39 executing program 3: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x800) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x9, 0x4) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) socketpair(0x2a, 0x4, 0x4, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$netrom(r3, &(0x7f0000000080)={{0x3, @null}, [@bcast, @remote, @default, @rose, @netrom, @netrom, @rose, @netrom]}, &(0x7f0000000100)=0x48) (async) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) accept$netrom(r1, 0x0, &(0x7f0000000040)) 00:24:39 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x8, r0, 0x0, 0x0, 0x1}}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:24:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x89a0, &(0x7f0000000640)) 00:24:39 executing program 4: mmap$dsp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x100000d, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) mmap$dsp(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) 00:24:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:24:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x89a1, &(0x7f0000000640)) 00:24:39 executing program 2: syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8906, &(0x7f0000000640)) 00:24:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x400448c9, &(0x7f0000000640)) 00:24:39 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300), 0xfffffffffffffffc, 0x400440) [ 1479.789380][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.791853][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:24:39 executing program 1: mmap$dsp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x100000d, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) mmap$dsp(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) 00:24:39 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x8, r0, 0x0, 0x0, 0x1}}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:24:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x400448dd, &(0x7f0000000640)) 00:24:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8907, &(0x7f0000000640)) 00:24:39 executing program 0: ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000200)={0x4d6, 0x4, 0x4, 0x8, 0x6, {0x77359400}, {0x2, 0xc, 0x40, 0x0, 0x81, 0xff, "b201834b"}, 0x2, 0x4, {}, 0xa1af, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x80000) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000300)={0x3, 0x9, 0x4, 0x2, 0x9, {}, {0x4, 0x17, 0x9, 0x2, 0x5, 0x3, "d3dd44b5"}, 0x6, 0x4, {}, 0x6, 0x0, r0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0xbe, 0xb, 0x4, 0x2, 0x7, {0x77359400}, {0x2, 0x1, 0x6, 0x7, 0x9, 0xff, "bcbe3eaa"}, 0x3, 0x4, {}, 0x4}) getsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="cd0000020100000050000001000000007f007a84d5d260fbc8000100000000000000000000000000006ee6e2639625c44b000000000000000000ac1414bb000000000000000000000000e0000001020014000000000000001414aa000000002966bb80a5acb5c297bcc99a98a479df36ca5b5cdfcb115a054844f364b7dbabec4ab0d9d7ee5b2a88c7df74fc25fcabed38d307c7452706830000000000000000"]}) 00:24:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x400454ca, &(0x7f0000000640)) 00:24:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x890b, &(0x7f0000000640)) 00:24:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:24:39 executing program 4: ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000200)={0x4d6, 0x4, 0x4, 0x8, 0x6, {0x77359400}, {0x2, 0xc, 0x40, 0x0, 0x81, 0xff, "b201834b"}, 0x2, 0x4, {}, 0xa1af, 0x0, 0xffffffffffffffff}) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x80000) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000300)={0x3, 0x9, 0x4, 0x2, 0x9, {}, {0x4, 0x17, 0x9, 0x2, 0x5, 0x3, "d3dd44b5"}, 0x6, 0x4, {}, 0x6, 0x0, r0}) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0xbe, 0xb, 0x4, 0x2, 0x7, {0x77359400}, {0x2, 0x1, 0x6, 0x7, 0x9, 0xff, "bcbe3eaa"}, 0x3, 0x4, {}, 0x4}) (async) getsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="cd0000020100000050000001000000007f007a84d5d260fbc8000100000000000000000000000000006ee6e2639625c44b000000000000000000ac1414bb000000000000000000000000e0000001020014000000000000001414aa000000002966bb80a5acb5c297bcc99a98a479df36ca5b5cdfcb115a054844f364b7dbabec4ab0d9d7ee5b2a88c7df74fc25fcabed38d307c7452706830000000000000000"]}) 00:24:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x890c, &(0x7f0000000640)) 00:24:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40049409, &(0x7f0000000640)) 00:24:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@multicast1, 0x0, 0x0, 0x10, 0x0, [{@remote}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x422001) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 00:24:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001b7e63000e"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x124, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x43bb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc9f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}]}, 0x124}, 0x1, 0x0, 0x0, 0x801}, 0x200040c4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=0x64010101, 0x0, 0x0, 0x20, 0x0, [{@multicast1}, {@loopback}]}}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@multicast1, 0x0, 0x0, 0x10, 0x0, [{@remote}]}}) (async, rerun: 32) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async, rerun: 32) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x422001) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 00:24:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x890d, &(0x7f0000000640)) [ 1480.083582][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40086602, &(0x7f0000000640)) 00:24:40 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x1c041, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 00:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000800}, 0x4000000) 00:24:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001b7e63000e"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x124, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x43bb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc9f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}]}, 0x124}, 0x1, 0x0, 0x0, 0x801}, 0x200040c4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=0x64010101, 0x0, 0x0, 0x20, 0x0, [{@multicast1}, {@loopback}]}}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001b7e63000e"], 0x3c}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x124, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x43bb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc9f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}]}, 0x124}, 0x1, 0x0, 0x0, 0x801}, 0x200040c4) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=0x64010101, 0x0, 0x0, 0x20, 0x0, [{@multicast1}, {@loopback}]}}) (async) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) (async) 00:24:40 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0xb, 0x35, 0xc, 0x1b, 0x9, 0x33b, 0x6, 0x15a, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000001240), 0xc) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000240)={0xa, 0x28, 0xe, 0x2, 0x2, 0x7, 0x3, 0x12e}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c084}, 0x40) 00:24:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8912, &(0x7f0000000640)) 00:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40186366, &(0x7f0000000640)) [ 1480.178095][ T5979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:24:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x0) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000800}, 0x4000000) 00:24:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8914, &(0x7f0000000640)) 00:24:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0xb, 0x35, 0xc, 0x1b, 0x9, 0x33b, 0x6, 0x15a, 0x1}) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000001240), 0xc) (async) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000240)={0xa, 0x28, 0xe, 0x2, 0x2, 0x7, 0x3, 0x12e}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c084}, 0x40) 00:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x8919, &(0x7f0000000640)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x401c5820, &(0x7f0000000640)) 00:24:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private=0xa010102, 0x1, 0x0, 0x20, 0x0, [{@initdev}, {@broadcast}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 2: syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private=0xa010102, 0x1, 0x0, 0x20, 0x0, [{@initdev}, {@broadcast}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)={@remote, 0x0, 0x0, 0x50, 0x0, [{@loopback}, {}, {@broadcast}, {@local}, {@remote}]}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@rand_addr=0x64010100, 0x0, 0x0, 0x80, 0x0, [{@multicast1}, {}, {}, {@remote}, {@remote}, {@local}, {@multicast2}, {@local}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1480.437994][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.441291][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:24:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x4020940d, &(0x7f0000000640)) 00:24:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8915, &(0x7f0000000640)) 00:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x8919, &(0x7f0000000640)) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x80086301, &(0x7f0000000640)) 00:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)={@remote, 0x0, 0x0, 0x50, 0x0, [{@loopback}, {}, {@broadcast}, {@local}, {@remote}]}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@rand_addr=0x64010100, 0x0, 0x0, 0x80, 0x0, [{@multicast1}, {}, {}, {@remote}, {@remote}, {@local}, {@multicast2}, {@local}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x80086601, &(0x7f0000000640)) [ 1480.579660][ T6103] Bluetooth: hci7: command 0x0419 tx timeout 00:24:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8916, &(0x7f0000000640)) 00:24:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x80108906, &(0x7f0000000640)) 00:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x80108907, &(0x7f0000000640)) 00:24:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:24:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8917, &(0x7f0000000640)) 00:24:40 executing program 1: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x110, r1, 0xc7000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private=0xa010102, 0x1, 0x0, 0x20, 0x0, [{}, {@multicast1}]}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@local, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@multicast2}, {@dev}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x801c581f, &(0x7f0000000640)) [ 1480.819489][ T1843] block nbd4: Possible stuck request 000000000fceb2a2: control (read@0,4096B). Runtime 120 seconds 00:24:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) 00:24:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8918, &(0x7f0000000640)) 00:24:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0xc0045878, &(0x7f0000000640)) 00:24:40 executing program 0: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x110, r1, 0xc7000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x110, r1, 0xc7000) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) (async) 00:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x50, 0x0, [{@loopback}, {@empty}, {}, {@local}, {@broadcast}]}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x2, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:24:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private=0xa010102, 0x1, 0x0, 0x20, 0x0, [{}, {@multicast1}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@local, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@multicast2}, {@dev}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0xc0045878, &(0x7f0000000640)) 00:24:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x50, 0x0, [{@loopback}, {@empty}, {}, {@local}, {@broadcast}]}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x2, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:24:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x50, 0x0, [{@loopback}, {@empty}, {}, {@local}, {@broadcast}]}}) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x2, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:24:41 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0xfffffbff, 0x4) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1, 0x3, 0x20}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x29) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:24:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8919, &(0x7f0000000640)) 00:24:41 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x1c041, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) [ 1481.059572][ T6103] Bluetooth: hci8: command 0x0419 tx timeout 00:24:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0x401870c8) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x8) close$fd_v4l2_buffer(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x1c, r4, 0x501, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x14}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x400c084) 00:24:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0xc0189436, &(0x7f0000000640)) 00:24:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:24:41 executing program 3: r0 = inotify_init1(0x400) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x810) inotify_rm_watch(r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:24:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0xc020660b, &(0x7f0000000640)) 00:24:41 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0xfffffbff, 0x4) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x1, 0x3, 0x20}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x29) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (rerun: 32) 00:24:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0x401870c8) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x8) close$fd_v4l2_buffer(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x1c, r4, 0x501, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x14}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x400c084) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r3, 0x401870c8) (async) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x8) (async) close$fd_v4l2_buffer(r2) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x1c, r4, 0x501, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x14}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x400c084) (async) 00:24:41 executing program 1: r0 = inotify_init1(0x400) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x810) inotify_rm_watch(r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:24:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x891a, &(0x7f0000000640)) 00:24:41 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffffd, 0x355002) 00:24:41 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0xca100) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), &(0x7f0000000000)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 00:24:41 executing program 0: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$phonet_pipe(0x23, 0x5, 0x2) 00:24:41 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffffd, 0x355002) syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffffd, 0x355002) (async) 00:24:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2e}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0x1}}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:24:41 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:24:41 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000000)={'custom0\x00'}) r1 = accept4$phonet_pipe(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80000) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:24:41 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0xca100) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), &(0x7f0000000000)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 00:24:41 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0xca100) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), &(0x7f0000000000)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 00:24:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2e}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0x1}}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x2e}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0x1}}, 0x18) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:24:41 executing program 2: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 00:24:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x891b, &(0x7f0000000640)) 00:24:41 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000000)={'custom0\x00'}) (async) r1 = accept4$phonet_pipe(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80000) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:24:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:24:41 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) 00:24:41 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x80, 0x7, 0x3}, 0x10) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000040)) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0)=0xffffff01, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:41 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:24:41 executing program 3: set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0x5, 0x7a2, 0xffff7fff, 0x2, 0x7a, 0x5, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x401, 0x4) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) 00:24:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x891c, &(0x7f0000000640)) 00:24:41 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x3f, 0x4) syz_open_dev$vcsa(&(0x7f0000000300), 0x4, 0x101540) 00:24:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) 00:24:41 executing program 4: set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0) (async) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0x5, 0x7a2, 0xffff7fff, 0x2, 0x7a, 0x5, 0x1}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x401, 0x4) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) 00:24:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:41 executing program 1: syz_open_dev$vcsa(&(0x7f0000000300), 0x2, 0xc40) 00:24:41 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x80, 0x7, 0x3}, 0x10) (async) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000040)) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0)=0xffffff01, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8933, &(0x7f0000000640)) 00:24:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@local, 0x1, 0x0, 0x40, 0x0, [{}, {@local}, {}, {@dev}]}}) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:24:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:24:41 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x3f, 0x4) (rerun: 64) syz_open_dev$vcsa(&(0x7f0000000300), 0x4, 0x101540) 00:24:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@local, 0x1, 0x0, 0x40, 0x0, [{}, {@local}, {}, {@dev}]}}) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:24:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:24:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8934, &(0x7f0000000640)) 00:24:41 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000889c2e92d48d10781d88141229e203716f728e7dca2fd8da6710d372b4680b0b52973f5b1998cd4eb825d50fd58c08438befba4ec3c85abd3e9efc44510bdd03937a3604be784af83428d11211c75a21c504aa7144a8aebf4464f92919b35bd6d7e94a90cb692d5b51c61c5e52b4886f18f9048ddf9e3acb90d7421b4a586f7773176a4511eb606040baa94eb46401c55b92db983e5c6a8e418b285d767f47f7334656660ac5f87505d44602233620b70b37d85adad913717f1c8e92dde8b053bf3372094c3468207d02e5101e961bd6f2f8fe74fd92fca4901e", @ANYRES16=r3, @ANYBLOB="080028bd7000fddbdf25070000000c00160007000000000000000500120003000000050013001f00000006000e000600000006001b004e230000"], 0x40}, 0x1, 0x0, 0x0, 0x8880}, 0x4000804) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 00:24:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socket$inet_udplite(0x2, 0x2, 0x88) 00:24:41 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r0, 0x8000000) 00:24:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000889c2e92d48d10781d88141229e203716f728e7dca2fd8da6710d372b4680b0b52973f5b1998cd4eb825d50fd58c08438befba4ec3c85abd3e9efc44510bdd03937a3604be784af83428d11211c75a21c504aa7144a8aebf4464f92919b35bd6d7e94a90cb692d5b51c61c5e52b4886f18f9048ddf9e3acb90d7421b4a586f7773176a4511eb606040baa94eb46401c55b92db983e5c6a8e418b285d767f47f7334656660ac5f87505d44602233620b70b37d85adad913717f1c8e92dde8b053bf3372094c3468207d02e5101e961bd6f2f8fe74fd92fca4901e", @ANYRES16=r3, @ANYBLOB="080028bd7000fddbdf25070000000c00160007000000000000000500120003000000050013001f00000006000e000600000006001b004e230000"], 0x40}, 0x1, 0x0, 0x0, 0x8880}, 0x4000804) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 00:24:41 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:24:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socket$inet_udplite(0x2, 0x2, 0x88) 00:24:41 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r0, 0x8000000) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r0, 0x8000000) (async) 00:24:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8935, &(0x7f0000000640)) 00:24:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x5, 0x5, 0x1f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={@local, 0x1, 0x0, 0x50, 0x0, [{@private}, {@broadcast}, {@broadcast}, {@local}, {@remote}]}}) 00:24:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:24:41 executing program 2: setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) 00:24:41 executing program 1: syz_open_dev$vcsa(&(0x7f0000000300), 0x10000, 0x0) 00:24:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x5, 0x5, 0x1f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={@local, 0x1, 0x0, 0x50, 0x0, [{@private}, {@broadcast}, {@broadcast}, {@local}, {@remote}]}}) 00:24:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:24:42 executing program 1: setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) (async) 00:24:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) socketpair(0x5, 0x5, 0x1f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 32) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async, rerun: 32) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={@local, 0x1, 0x0, 0x50, 0x0, [{@private}, {@broadcast}, {@broadcast}, {@local}, {@remote}]}}) (rerun: 32) 00:24:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) (async) 00:24:42 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) 00:24:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8940, &(0x7f0000000640)) 00:24:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:24:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:24:42 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) (async) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) 00:24:42 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x45, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_OFFSET={0x6}]}, 0x38}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:24:42 executing program 1: syz_open_dev$vcsa(&(0x7f0000000300), 0x10000, 0x0) 00:24:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) [ 1510.909298][ T1843] block nbd4: Possible stuck request 000000000fceb2a2: control (read@0,4096B). Runtime 150 seconds 00:25:11 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 00:25:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8941, &(0x7f0000000640)) 00:25:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:25:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:11 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x45, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_OFFSET={0x6}]}, 0x38}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:25:11 executing program 0: bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x12a02100}, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x40086602, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0a0101000000000050000000000000007f000001000000000000000000000000ac1e0000000000000000000000000000e0000002000000000000000000000000e0000002000000000000000000000000ac1e0000000000000000000000000000998885929e3bf9d1314836f6a19c349b9dac59e4ecb51d05ed97088c3f7e902c6f0a1a4f1ccf0c9fdef2c942de8dbe214ef2d7"]}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000140)=""/149, &(0x7f0000000100)=0x95) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) close$fd_v4l2_buffer(r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x80002) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in6={0xa, 0x0, 0x0, @private1}}}, 0x118) close$fd_v4l2_buffer(r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x4, 0x1220, 0x21, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xb32415bd660a96e9, 0x7ff, 0x8}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) 00:25:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="6af803bbfc3a4bde0a415d53c82d361153e3f6441fb9ffffffffffffffff38199465d93f1e8235c597299db8a61fb571316092cf78a356bf696d7ce2d45c76b54193261d35f21d95e34b2aebcf1a7a045885bad4c3a04041a1cd811ddeff371b6c7e019ea8e6236dc8d2890cdd03ac", @ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESHEX=r0]}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 00:25:11 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x12, r0, 0x8000000) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0x9, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:25:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:11 executing program 3: bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x12a02100}, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x40086602, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0a0101000000000050000000000000007f000001000000000000000000000000ac1e0000000000000000000000000000e0000002000000000000000000000000e0000002000000000000000000000000ac1e0000000000000000000000000000998885929e3bf9d1314836f6a19c349b9dac59e4ecb51d05ed97088c3f7e902c6f0a1a4f1ccf0c9fdef2c942de8dbe214ef2d7"]}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x894c, &(0x7f0000000640)) 00:25:11 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x12, r0, 0x8000000) (async, rerun: 32) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0x9, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) (rerun: 32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:25:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}) (async) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="6af803bbfc3a4bde0a415d53c82d361153e3f6441fb9ffffffffffffffff38199465d93f1e8235c597299db8a61fb571316092cf78a356bf696d7ce2d45c76b54193261d35f21d95e34b2aebcf1a7a045885bad4c3a04041a1cd811ddeff371b6c7e019ea8e6236dc8d2890cdd03ac", @ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESHEX=r0]}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 00:25:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:25:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) getsockopt$inet_udp_int(r1, 0x11, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffd54) 00:25:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000140)=""/149, &(0x7f0000000100)=0x95) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) close$fd_v4l2_buffer(r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x80002) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in6={0xa, 0x0, 0x0, @private1}}}, 0x118) (async) close$fd_v4l2_buffer(r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x4, 0x1220, 0x21, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xb32415bd660a96e9, 0x7ff, 0x8}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) 00:25:11 executing program 1: syz_open_dev$vcsa(&(0x7f0000000300), 0x3, 0xc40) 00:25:11 executing program 2: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:25:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000300)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5452, &(0x7f0000000640)) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000080), &(0x7f0000000500)=0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000340), &(0x7f0000000380)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0xcb, 0xa0ae, 0x61, @dev={0xfe, 0x80, '\x00', 0x3b}, @private1, 0x700, 0x10, 0xff, 0xff}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001a00)=ANY=[@ANYBLOB="d8120000", @ANYRES64=r2, @ANYBLOB="000229bd7000fbdb7bffffffce5c0b6e5d7cf91b000100", @ANYRESDEC=r2, @ANYBLOB="88000100080003010000000800e3000200000008000300040000000800010016be6740b278852a4f1f18b5ec4cb6e7b43a79e4197c165586cb1676543784a13708e89130ef10d59a48b879dd80c6fa35720f42e96197e7bb312b3719e679e34c37e7aad6adca0a801a90ec1eedc188f112a771c9375c35383d20379084a13f34ea6fbc2213", @ANYRES32=r3, @ANYBLOB="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"], 0x12d8}, 0x1, 0x0, 0x0, 0x880}, 0x4048045) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="25080000000169fa14dd0fda6a905033801e856292ac68c04192b8e268c36030ac5da71c047f543098f811828e599efb6d84191105fd2ebff579eabdb02db4663f5303ac7472d7977eca59acc8d6971f382fe66c6419e732768e78d1d273eb49b6557740bce1c449b3af5966b5cbfb93e50fa45b010cf308bee2833524586c04d6068139737c845e3f4c48f87e0e9a77032c6702000000aeb33c8c7f9321f28b66b9a7c3cd93090000006fadbc0e24a436b8d1fd61ca85f8af0153", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf250700000006001d002000000006001c00200000000500210001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x800) 00:25:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async, rerun: 64) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async, rerun: 64) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async) getsockopt$inet_udp_int(r1, 0x11, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffd54) 00:25:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8953, &(0x7f0000000640)) 00:25:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@multicast2, 0x1, 0x0, 0x20, 0x0, [{@initdev}, {@broadcast}]}}) 00:25:11 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) 00:25:11 executing program 0: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000300)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5452, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000080), &(0x7f0000000500)=0x4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0xcb, 0xa0ae, 0x61, @dev={0xfe, 0x80, '\x00', 0x3b}, @private1, 0x700, 0x10, 0xff, 0xff}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001a00)=ANY=[@ANYBLOB="d8120000", @ANYRES64=r2, @ANYBLOB="000229bd7000fbdb7bffffffce5c0b6e5d7cf91b000100", @ANYRESDEC=r2, @ANYBLOB="88000100080003010000000800e3000200000008000300040000000800010016be6740b278852a4f1f18b5ec4cb6e7b43a79e4197c165586cb1676543784a13708e89130ef10d59a48b879dd80c6fa35720f42e96197e7bb312b3719e679e34c37e7aad6adca0a801a90ec1eedc188f112a771c9375c35383d20379084a13f34ea6fbc2213", @ANYRES32=r3, @ANYBLOB="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"], 0x12d8}, 0x1, 0x0, 0x0, 0x880}, 0x4048045) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="25080000000169fa14dd0fda6a905033801e856292ac68c04192b8e268c36030ac5da71c047f543098f811828e599efb6d84191105fd2ebff579eabdb02db4663f5303ac7472d7977eca59acc8d6971f382fe66c6419e732768e78d1d273eb49b6557740bce1c449b3af5966b5cbfb93e50fa45b010cf308bee2833524586c04d6068139737c845e3f4c48f87e0e9a77032c6702000000aeb33c8c7f9321f28b66b9a7c3cd93090000006fadbc0e24a436b8d1fd61ca85f8af0153", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf250700000006001d002000000006001c00200000000500210001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x800) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@multicast2, 0x1, 0x0, 0x20, 0x0, [{@initdev}, {@broadcast}]}}) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8954, &(0x7f0000000640)) 00:25:12 executing program 2: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8955, &(0x7f0000000640)) 00:25:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:25:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="64010101890000000000005dd686a3fd5747c05ca4d1ecf4e0e2000000"]}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:25:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8982, &(0x7f0000000640)) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x804) 00:25:12 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="64010101890000000000005dd686a3fd5747c05ca4d1ecf4e0e2000000"]}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="64010101890000000000005dd686a3fd5747c05ca4d1ecf4e0e2000000"]}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) 00:25:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8983, &(0x7f0000000640)) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x804) 00:25:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x89a0, &(0x7f0000000640)) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:25:12 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x8000) 00:25:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xe1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10080}, 0x4004040) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="39b537d521e4f3c885b818c0932ce7df74e2c4d21117f251c33050", 0x1b, r0}, 0x68) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x89a0, &(0x7f0000000640)) 00:25:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xe1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10080}, 0x4004040) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x8000) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:25:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="39b537d521e4f3c885b818c0932ce7df74e2c4d21117f251c33050", 0x1b, r0}, 0x68) 00:25:12 executing program 3: r0 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x2000, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x3}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x89a1, &(0x7f0000000640)) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x8000) 00:25:12 executing program 1: r0 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x2000, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x3}) (async, rerun: 32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x400448c9, &(0x7f0000000640)) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:25:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x7, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vcsa(&(0x7f0000000080), 0xb8f, 0x2040) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000001c0), &(0x7f00000000c0)=0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/157, 0x9d, 0x1, &(0x7f0000000200)=""/153, 0x99}, &(0x7f0000000340)=0x40) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@empty, 0x1, 0x0, 0x10, 0x0, [{@multicast1}]}}) 00:25:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x7, 0x4) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x7, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_open_dev$vcsa(&(0x7f0000000080), 0xb8f, 0x2040) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async, rerun: 32) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (rerun: 32) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000001c0), &(0x7f00000000c0)=0x4) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/157, 0x9d, 0x1, &(0x7f0000000200)=""/153, 0x99}, &(0x7f0000000340)=0x40) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@empty, 0x1, 0x0, 0x10, 0x0, [{@multicast1}]}}) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000180), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x400448dd, &(0x7f0000000640)) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000180), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:12 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x8953, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) [ 1512.962386][T19393] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 00:25:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1512.975515][T19393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1512.982550][T19393] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1512.985225][T19393] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1512.987886][T19393] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1512.990815][T19393] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 00:25:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:13 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x8953, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x400454ca, &(0x7f0000000640)) [ 1513.116927][T19393] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1513.121424][T19393] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:13 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x40040000000, 0xc2502) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x40000804) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) inotify_rm_watch(r2, r1) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x1c0) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x110, r0, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x200) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 00:25:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000)="cf2c10df3e5cc77a1969ed32d53180e74debae3f08b79f626fee2c85c23dea2ca50afca6d59de76447213605398ec44070ed97c7b0b7410ab3fce6ce114c9e659745fe4076caa5445d7f89e90e95", 0x4e, r1}, 0x68) [ 1513.127508][T19393] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1513.138284][T19393] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1513.141304][T19393] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1513.143411][T19393] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) 00:25:13 executing program 3: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000780), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000007c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r3}}, 0x18) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xe5, 0x3, 0x4, 0x4000, 0xc00000, {r0, r1/1000+60000}, {0x3, 0xc, 0x40, 0x3, 0x1, 0x75, "b5da2234"}, 0x80, 0x4, {}, 0xffff, 0x0, r3}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000640)) 00:25:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x8000) 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40049409, &(0x7f0000000640)) 00:25:13 executing program 0: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000780), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000007c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r3}}, 0x18) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xe5, 0x3, 0x4, 0x4000, 0xc00000, {r0, r1/1000+60000}, {0x3, 0xc, 0x40, 0x3, 0x1, 0x75, "b5da2234"}, 0x80, 0x4, {}, 0xffff, 0x0, r3}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000640)) clock_gettime(0x0, &(0x7f0000000040)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000780), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000007c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r3}}, 0x18) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xe5, 0x3, 0x4, 0x4000, 0xc00000, {r0, r1/1000+60000}, {0x3, 0xc, 0x40, 0x3, 0x1, 0x75, "b5da2234"}, 0x80, 0x4, {}, 0xffff, 0x0, r3}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000640)) (async) 00:25:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000)="cf2c10df3e5cc77a1969ed32d53180e74debae3f08b79f626fee2c85c23dea2ca50afca6d59de76447213605398ec44070ed97c7b0b7410ab3fce6ce114c9e659745fe4076caa5445d7f89e90e95", 0x4e, r1}, 0x68) 00:25:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:25:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x80002) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x13, r1, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40086602, &(0x7f0000000640)) 00:25:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x80002) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x13, r1, 0x0) (async, rerun: 32) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 32) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:13 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x40040000000, 0xc2502) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x40000804) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8041) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) (async) inotify_rm_watch(r2, r1) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x1c0) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x110, r0, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x200) (async) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) (async) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x40186366, &(0x7f0000000640)) 00:25:13 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:25:13 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0xc40) 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x14}, 0x1, 0x0, 0x30, 0x0, [{}, {@dev}, {@remote}]}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1513.418145][T27530] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:25:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x401c5820, &(0x7f0000000640)) 00:25:13 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0xc40) 00:25:13 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) [ 1513.508068][T27530] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:25:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x14}, 0x1, 0x0, 0x30, 0x0, [{}, {@dev}, {@remote}]}}) (async, rerun: 64) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:25:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x4020940d, &(0x7f0000000640)) [ 1513.563887][ T6523] chnl_net:caif_netlink_parms(): no params data found 00:25:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r0, 0x0) 00:25:13 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x80086301, &(0x7f0000000640)) [ 1513.612984][T27530] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:25:13 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r0, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r0, 0x0) (async) 00:25:13 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 1513.669919][T27530] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:25:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) 00:25:13 executing program 0: r0 = io_uring_setup(0x6691, &(0x7f0000000000)={0x0, 0x443d, 0x2000, 0x3, 0x200}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x80010, r0, 0x8000000) io_uring_setup(0x1b2c, &(0x7f0000000080)={0x0, 0x3f47, 0x2, 0x3, 0xc2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x9, 0x181000) syz_open_dev$usbfs(&(0x7f0000000140), 0x4, 0x30200) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x8) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:25:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x80086601, &(0x7f0000000640)) 00:25:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x512480) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x5, 0x6e, 0x5}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x80, 0x42, 0x43}, 0x0) 00:25:13 executing program 3: r0 = io_uring_setup(0x6691, &(0x7f0000000000)={0x0, 0x443d, 0x2000, 0x3, 0x200}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x80010, r0, 0x8000000) io_uring_setup(0x1b2c, &(0x7f0000000080)={0x0, 0x3f47, 0x2, 0x3, 0xc2}) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x9, 0x181000) (async) syz_open_dev$usbfs(&(0x7f0000000140), 0x4, 0x30200) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x8) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:25:13 executing program 2: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) 00:25:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x80108906, &(0x7f0000000640)) 00:25:13 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x512480) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x5, 0x6e, 0x5}, 0x10) (async, rerun: 64) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x80, 0x42, 0x43}, 0x0) (rerun: 64) [ 1513.804773][ T6523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.806852][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state 00:25:13 executing program 2: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) [ 1513.818980][ T6523] bridge_slave_0: entered allmulticast mode [ 1513.821547][ T6523] bridge_slave_0: entered promiscuous mode 00:25:13 executing program 0: io_uring_setup(0x29ab, &(0x7f0000000300)={0x0, 0x0, 0x22}) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x8010, r0, 0x0) 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x80108907, &(0x7f0000000640)) 00:25:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x100000001, 0x288400) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="ac1414bb010000008000000000000000ffffffff00000000000000ffffff7f00e00000020000000200000000000000007f000001000000000000000000000000ac141400000000000000000000000000ac1414bb00000000000000000000140000000000000000000000000000000000e00000010000000000000000000000000000000000000000000000000000000023d670d5e1da6a5c08286bb7120f8b8b077f04b3443149ca1ff87faa82997548831f3ba67d17f8be5333ef241696545fa9f0eac8595f814c60da70cf3441e40dcceda20c9f7fec790110518eb33f4a3e1e6bf458cf"]}) 00:25:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x801c581f, &(0x7f0000000640)) [ 1513.891864][ T6523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.893768][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.895773][ T6523] bridge_slave_1: entered allmulticast mode 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x100000001, 0x288400) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 1513.919742][ T6523] bridge_slave_1: entered promiscuous mode 00:25:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="ac1414bb010000008000000000000000ffffffff00000000000000ffffff7f00e00000020000000200000000000000007f000001000000000000000000000000ac141400000000000000000000000000ac1414bb00000000000000000000140000000000000000000000000000000000e00000010000000000000000000000000000000000000000000000000000000023d670d5e1da6a5c08286bb7120f8b8b077f04b3443149ca1ff87faa82997548831f3ba67d17f8be5333ef241696545fa9f0eac8595f814c60da70cf3441e40dcceda20c9f7fec790110518eb33f4a3e1e6bf458cf"]}) 00:25:13 executing program 3: io_uring_setup(0x29ab, &(0x7f0000000300)={0x0, 0x0, 0x22}) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x8010, r0, 0x0) 00:25:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1513.997420][ T6523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 00:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0xc0045878, &(0x7f0000000640)) [ 1514.025218][ T6523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1514.027972][ T6539] chnl_net:caif_netlink_parms(): no params data found 00:25:14 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x8881) 00:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfd}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1000}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x30}}, 0x44000) 00:25:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0xc0045878, &(0x7f0000000640)) 00:25:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:14 executing program 3: syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x8881) 00:25:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfd}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1000}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x30}}, 0x44000) 00:25:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0xc0189436, &(0x7f0000000640)) [ 1514.123584][ T6523] team0: Port device team_slave_0 added [ 1514.155001][ T6523] team0: Port device team_slave_1 added 00:25:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x23, 0x800, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="edd81d7e", @ANYRES16=r2, @ANYBLOB="00082bbd7000fcdbdf25050000000600010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x24) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x301180) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:25:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0xc020660b, &(0x7f0000000640)) 00:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) socketpair(0x23, 0x800, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="edd81d7e", @ANYRES16=r2, @ANYBLOB="00082bbd7000fcdbdf25050000000600010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x24) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 1514.302604][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.304622][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 00:25:14 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x301180) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 1514.325052][ T6523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.334850][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.338068][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.364174][ T6523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 00:25:14 executing program 3: syz_open_dev$vcsa(&(0x7f0000000300), 0x4, 0xc40) 00:25:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 00:25:14 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000)=0x8, 0x4) 00:25:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x18c000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) 00:25:14 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x5, 0xc40) 00:25:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socketpair(0x1e, 0x0, 0x3ff, &(0x7f0000000240)) r1 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xbe8e, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x6, 0x51f, 0x1}, 0x10) 00:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) 00:25:14 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x18c000000) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) [ 1514.509276][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.519316][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.521505][ T6539] bridge_slave_0: entered allmulticast mode [ 1514.523661][ T6539] bridge_slave_0: entered promiscuous mode 00:25:14 executing program 3: inotify_init1(0x1800) syz_open_dev$vcsa(&(0x7f0000000300), 0xfffffffffffffffe, 0x214c00) 00:25:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1514.559632][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.561656][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.563820][ T6539] bridge_slave_1: entered allmulticast mode [ 1514.566123][ T6539] bridge_slave_1: entered promiscuous mode 00:25:14 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x6, 0xc40) 00:25:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback, 0x1, 0x0, 0x30, 0x0, [{@remote}, {@broadcast}, {@empty}]}}) 00:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:25:14 executing program 2: inotify_init1(0x1800) (async) syz_open_dev$vcsa(&(0x7f0000000300), 0xfffffffffffffffe, 0x214c00) 00:25:14 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x7, 0xc40) 00:25:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0xfffffffffffffffc, 0x3c2) getpeername$netrom(r0, 0xfffffffffffffffe, &(0x7f0000000040)) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000)=0xffffffffffffff18, 0x80000) [ 1514.671117][ T6523] hsr_slave_0: entered promiscuous mode [ 1514.689703][ T6523] hsr_slave_1: entered promiscuous mode 00:25:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}]}, 0x34}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) 00:25:14 executing program 3: syz_open_dev$vcsa(&(0x7f0000000300), 0x8, 0xc40) 00:25:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0xfffffffffffffffc, 0x3c2) getpeername$netrom(r0, 0xfffffffffffffffe, &(0x7f0000000040)) (async, rerun: 32) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000)=0xffffffffffffff18, 0x80000) (rerun: 32) 00:25:14 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x9, 0xc40) [ 1514.741324][ T6523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1514.744640][ T6523] Cannot create hsr debugfs directory 00:25:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}]}, 0x34}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}]}, 0x34}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) (async) 00:25:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback, 0x1, 0x0, 0x30, 0x0, [{@remote}, {@broadcast}, {@empty}]}}) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback, 0x1, 0x0, 0x30, 0x0, [{@remote}, {@broadcast}, {@empty}]}}) (async) 00:25:14 executing program 3: syz_open_dev$vcsa(&(0x7f0000000300), 0xa, 0xc40) [ 1514.810872][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1514.815499][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:25:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8000000000000000, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000080)={0x0, r2}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x521840, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 00:25:14 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000000)={{0x3, @bcast, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd2d, 0x35dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10045) 00:25:14 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300), 0xb, 0xc40) 00:25:14 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8000000000000000, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000080)={0x0, r2}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x521840, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 00:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socketpair(0x1, 0x800, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) 00:25:14 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000000)={{0x3, @bcast, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x9) (rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd2d, 0x35dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10045) [ 1514.943108][ T6539] team0: Port device team_slave_0 added 00:25:14 executing program 3: syz_open_dev$vcsa(&(0x7f0000000300), 0xc, 0xc40) 00:25:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) socketpair(0x1, 0x800, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) [ 1514.976525][ T6539] team0: Port device team_slave_1 added 00:25:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"bbe47f6937fdb8968d28ae0e58a3581a"}}}}, 0x90) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x1000)=nil) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x3b, 0x9}}, 0x20) 00:25:14 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0xd, 0xc40) [ 1515.031354][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1515.035315][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.050042][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 00:25:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040)="5d9351e470958e5f5de2aab6e7343124b3e802c3a8b09b03061161f095b562eb43f2465a9a776c459022e50fa060a6c50bf5e0ea3714d28ba5666e6f483e88939afaaacb1c870ec51b42dba1e01357cb4455ac6c158a78b9d3ba4e5cf0a8068b895b710e6e1005b28d25f13851723f2d28ec2f6c345c8845cf87ce9bdc88d40e96f91c47087410a5e713e8c186b179618f46e3e2ba4a7e8c2c8b7aab1a8677725d73aec514ddd6e4ddbbfb7c4f11cceb79d5ec6d7c0fcc4b4d48e6848ad5077caf6541161b2738ed6b51b681b46d2d0d53c807cd5457f52ac860b7b57120dee9cee69841eb8a168940faa2958c288f7312198c3dfb95c46b047c3c811f0058be3ba1570261d368c4762de2138fa41a8c526bf449699708c46798d7b378dd20345fc1d8dba4ea5404e8c987e17de80eea055918a0c214f7b6824e386c08424d99eabda342fd0979aeba386b2177503a59be39fe0866bed57329b0c54af418fca1f82ae78a445d19ab3d993a1864a1d12174b332f64fdd9d1f849096618a5532496a9f0eeec6bdffe091fb25ee9b787bcd94936d3b41e26d61c85cf332775300153285187860cdfe86ca26bbab6ce4cd8b93aa668ad22fde310ebbdf0e89bd1ed887d5e07f774fcfd4af491fe2f94a3937d7391efb48012bc59aeb639a5b4a00e4583edcc68db26f490f0cddc9876f15045d26786ad2914eba4f6b5cf7a3be806ce17292dafa4953ebd7f427b5eb7093869151e333c063bec2255709b5a4439eafca137f5e4e10ade8efb7521fc4caee0734683c9d52c0540e10410a5ec656917e1e5e30ad3906fa0a392786c5c0027226ec74b6b7215d69aee6b7893a7881b898ed101e6e9df41e3255d367ad7e263db089faed903adf601fbd9e89d0cdc68c1414bb0dcc6ebc222e4269a037c1301b3d3e4b8945029949a547006a6d2d240b15c73f5f89c350a889a3a3fed446cf1f446adef12d03d986d2411882ab54727057e604b9d49bd7e26b56fff33080c8eb47c4b74215dc00949f5c7de4fb6bce59cf31f380267058a613d882ade94bd4ac902b3c2196110b3e9cd48ab7f74ffee172780beb8c48a9762b764be7ac096fa9fa41cde00feac795a133bd78b18bf2ed43ecd267ff5af8512a14dcd8be23d151f178d1e0d3b5443b7549a76cc340a2b3bceecda92727684a9409b2d7978756c9a498ab9b2b43fe71fe8676a8a5c619c1aec84377188b8a21e0dbc8ca18de930e0b04e15a8706a6b886ca2d87e08b9f5b9c7161d6927a8fe449e8448006b9dcb1926d2c5bd0e16573a47d7ad6a9790fca05fbe28d874f7c4704ddb221e2be687eca4fc647c64799c3d23a68eef2ed4370186e5268368b1c84c46b7c30e74c2594e40a18fb09b238f766fbed607d85b21156e6d3a508d3dbe0269a816c8073e79bed639e2fc209ddb96f6fcbb5253d4be9de1544b48263109208c28f3624dc1d89751dde95bdbc26da84e655597169274831cf224d585eba9b44ea53a072fcc52ac57d0aceb00086beec167776330924b6a93054986e86258d4a812670f43355a710e266377cb87623990066a97a5507c2ab172b86967597e948f3ae2c941659a052ffac77387c494c4737e57d6e5c7d43d81e8340a998b38fa73d1d4d4baa79a78f05adff2952cf9df48af3a3475d4b5bcff09eda95d7dc6fadcc033f97aceb36b67ab19aafe4b92a2dbb66ed9a6377016bda6d35e5ba66cb19a6a1166c182af3f9125be2a316ec3b4163f54cfeadd939a99f18e56ac5d46739d09c2422aea1f050a17018a8a11c80282605ee9aa47ffc632dc328f213b2665c136ea0fbf45c8f54bd0772b75beae2d421443b8a974c757079d7b331959e913183da85da39546e0de811382958f359f7c2ce4e0c4055955bb8fd303e09a799966ec461c208b5b4e2e552eba97ac5c162d5391ec0f215c81f1ccef280262ea199e5e712b2eaff010378f83a705d0a381d066b60b786039d8c2567abd231cd7460240fa4a13fad6ebbaaff57f6edd328d84fa9e18dee5e35955cafd426929d63a6a6618a2a9d27eff37a8cc91d9348daf62374a805b16d9afefaf2ca2539069906f6857fcc2e7182054d34f53b8b73ec96472d81a10c73c7655be9ed5d32fa352486e3fc06db5e6ba7d5fbe9c6cf3979e4b3a6459e3178a7eb322ef76824e9205edb48e7ad0323494c297489708bd684a0c501608d3e6474fea7263efdd4e0ae4e50522b87af2c31808875e065698c058d1fe4570b8c4baa55e08e190b05391af4782f4fc1f3dc43f8fae7c03a1cc216096124e99e0df193ca269ad44fb90cce84f20b5efade7c8ae6feb28bafa601b388ef3f597bda3230d126c650992bf94e2270a7dd5c7cb1c91a96f317ac58efb98ad89b43adc5f6579e10426ddd1b7a1eaafebf9d14e3966f18fb932c8d9cb537640d50dbe0325fd2071e00223eb47d91cea44f09be5f51bf99aa722b466e864ed0ec73f3dc49714aa1888dde8def1a1a29b394792c1ab303cc135a12402cd0eec018292a5a51362e5c45af90c0a23fe646e8f33ef18a672f229dcddddc214f16dcc4c8e34b24048e24ba5f5a43d657f02a42db6e79b8325e875a8ac954e9102211449d51d960e9d5d1986edfa63ad1c6d529430605ac7c9b4cc5f936bb28866241fa67c9f341f03f71bc23dad3ec831f2978021fdefb9d4550d29852303a9ce1efc92d95f54753ec04bdb2e3214e38333762741992d0493f18e25eefa98d85f011f1bfb31eb2110d8118c7322053f285284f395d4b6279d83df0fbece7a3ddddf3e41c809029acb68be6ee1452bc3e4f1c4b1f03c6e034634bff59718049ed9b973904068fc2fddde40056445c14e3e772e090153389b72df4a0df84cb6018f369d39422688a50485f7ce881a4de90769522a354c7814129a9e80fcd24097d3609ba90f9ef5e24662a1467f216e2ba560c61439412bda709dc59af9be5b6c2ed3758c37d7aed7f97b97148e7fb4e1f35a8f540a42c38cc91aacc8235afdfb4b67a7c6ee2387e5467ce7abc615ba549e43d8ae114cc178b3c69e5469365aa7024e52bd88f5e43709bed7610952611e9eb3242f5b4452178d375799e184dad53c5521bba80a5dd7b9e20a7fc6af5e3a77969404081a6faf50a0769d8014fe369fce74c38d76b3df644fed8c54ba6f47162cffe42175e0cb392b43e729eba5470c73e5ca49bdef81005891250f29c7997100c3e176183418b1774d817029c4cce6ebf0d243dda29e1563d370ebda0457fc2f22971a805fefa6944f3a8751e5a15f483e6fe838627544947a90b4e82a19a4bdb58c44f59401ebd119c3fae619c318b42805520de840748926a373d8a00d1eba0ccd1f0982ef04caa14838814cb3ddf4dd2209bf6626728d75a5d43d8efc5fa9e6eba606c9fad76059b589883abbc25a9066d2d39d0a5aff7c9408969bd9b9b66c199524790a1f8f57740647f3733fb2fcf93ce152ff74a6ce35944521e7429ee9622c02d2279c7641addb7927b45e973d00a34c2973a66c72a43acedd2039374e96c17d308834616962af68643d5612bfc94385eb1f8b750672193ecf288a729b375376b283829e7e802f980216aa901cbf13513954e0d2f3b0b38558fd1f6bdf86b6fa054011f473924f5617d2272a70ea901d2b1b486503307fb325daa3140a3eac463ba8ba048a11b8b976f3d3185e05f5412561e02bd67e09cc24484a36bd39588a996b1fce871ee029ea2f43bbe35ee3a7ae97750c992952866a442d302f026e81d378c1011e628814d5526ceb52f67a9bf9006d78b6c8d6e7b3d01c886ed9b80eae0da8209a76425402caad2f32a3e1340c7275b693d5e3cb29e6cdcf06f74bf07e1c0a116ee18092307d4efa55d785a3e818a4742217c395ddb60837355e5d64b4dd4a44c0dbea9575ef6e8be4d79ca5a43a470bd262c51086f2e08a320b1d95ad7856e31ee7f6e413fb8dac3e4341b15e7c759d0e452f7dc289bd3e9424c983009a05676083c5a1cbe8bb943f6d0d6ac9698fff70d84cbead3dff271e926080e864369c4c2d1c250a224e98de53ec8bd74bf15b29893b7052f7f49709c41e3959e6d92dbd5697de890b243b18f1170b28becee34f72f8e481d65e6652fdef3387552bb437108b4837c99c6ba0074ac0f7181d4ba1d35aa23e7a10127797fc1eadd4e1774ca1aef0bacc84449db0d7904f2296cec41e4ef2612174b9ec51ad7413114d16fedc67308f07eb9ae100b6a226e0a97fc7432f0f9e901735d60bee4faecf88fe39abaffe419000989e1831fa7f1fdcb6d8c972766f2fa5daa57a0c15afc3b9ae7fe8aab883b6a5dd836efc7095121f1518b33d28db668a671e5a4613d8eae2b73ae9ce57321110fa4f4770f306a706781bab52a2d1f51ffa3af0da4df2fddae9622030b0ec0340bef062284b9073d94d1e656beb4d84a4e9d031da9f0f59da7fdb49214d96fd8811562d25478e3ab9dcde60ebf0cba87703c1cffb1c4b4aa332759ec910c6b900cf40f31b0a5edfba3ef4b6d3a112daeda6aa4c5d8679b12ca75d5a9cc1a601927e187cd911708e00b7f5467dd338f503417df64b60fb5ef12dedb4382921a4ed6808dff95c0b881dd6405162d184bc381aad4f928a2ae7e1b7d24f57f461fb8b7a2c50a7d7500c483fc7109353de5e287f624616dff81740672d2b2d75411c5ed88e96be0898158a5d8463a3d4af4175acd4cf6f6a8c9f338e0699557d962a50e04ea3fe3e3c7d6f14cf0e7f9c0d3a5846589cbc35c040fbd743f640d882308104d1c7968e783a09bd5c3730c7a3cc8d82ba0e07d5c3e756f82505597fd6cb30d32d11e3291b84e6e8b50ac6e3c7542c2c462fb025e193922a60a412a7d9773ca660df3ac475cb4a141ac24d764ec5d02f61b173f36e956c066c10dbddd35173cbfa86d824c27b0c562098daefb9aaa89c4236a622f859abbe1e8d14f6de6d302c428501742fca323090e6a8ca0f700b3065e80380a1374c54f6cb999a9b1117d821e81089a23833939b2cf1966e821e0302186f45bc318384d176015e2062a2b63039e656028ed604757c1d9ea6b5c63b3a2c0ac119d53c8929fb9422ec9aec66bd8b61965b360efac125a8e40dbd5026ec3ce3ad0db57b98b06f0cb12c1dc2e65e8a872b45ad07c4a0b67caff8281b267edddd465231e87995f6efc47e49aa00f1a67e9ce7d30c6fbb523e24d661324f2d7335bc040e3c21c27351f904e85e6b63b712b6dce80badd5c346e4acf97167a74b1d2db250b4ac445b7329799f74c0819a0d146747d27a6bc7fc2962883b43fdc525e77eacfad7af41d671dd41bbfec9778e346db2368a2f0a7dd09f4560f1ec3da14cbec30cb7cf69f76f83004f5c3370f262506b66411bca7cbc7578b7c2247f6e8a4acedf80ee27fe97980100267feb29dfd3bcf978db5f494a5333b410bc8baae1a4f3bcc3c8bd953f43942dcf1b3388065937bb8cda8cdd18df24b589a640059c7e4cfde14a192a1adf89277c77940443a945e532b943c2db1f448d353c756a8f42960424efce3bbdbc470099bd2cd6756bdc9f6cdd39db9f15f3f67ec061010b2c2b51030900cfd44f374180f32ba162397312fb20321f5f335d3ea7082ffce2f7d8bf4fa4169bc9252dfe433f3dd99567bc0e00d3851316f5f7222ede896fc10bbe40078fb547c2e4935b6855d0fe316c6585afe26635adc6097df21e79ad6fc7ffdc972e31a25757cbfbd1c126f22717f8e7177a1cd03635633fb11da76460f7cc61c251e7a8500de944b248fc9430f54725002", 0x1000, r1}, 0x68) 00:25:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socketpair(0x1e, 0x0, 0x3ff, &(0x7f0000000240)) r1 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xbe8e, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x6, 0x51f, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) socketpair(0x1e, 0x0, 0x3ff, &(0x7f0000000240)) (async) socket$netlink(0x10, 0x3, 0x15) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xbe8e, 0x4) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x6, 0x51f, 0x1}, 0x10) (async) [ 1515.061016][ T6103] Bluetooth: hci1: command 0x0409 tx timeout [ 1515.065240][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.067129][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.095316][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 00:25:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"bbe47f6937fdb8968d28ae0e58a3581a"}}}}, 0x90) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x1000)=nil) (async) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x1000)=nil) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x3b, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x3b, 0x9}}, 0x20) 00:25:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040)="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", 0x1000, r1}, 0x68) 00:25:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r2, 0x0, 0x2, 0x4}}, 0x20) 00:25:15 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300), 0xe, 0xc40) 00:25:15 executing program 2: ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0x44) 00:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4230801}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@multicast1, 0x0, 0x0, 0x50, 0x0, [{}, {@private}, {@dev}, {@empty}, {@empty}]}}) 00:25:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r2, 0x0, 0x2, 0x4}}, 0x20) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r2}}, 0x30) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r2, 0x0, 0x2, 0x4}}, 0x20) (async) [ 1515.221396][ T6103] Bluetooth: hci8: command 0x0409 tx timeout 00:25:15 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x10, 0xc40) 00:25:15 executing program 0: ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0x44) 00:25:15 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x7, 0x521201) 00:25:15 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x11, 0xc40) 00:25:15 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x7, 0x521201) 00:25:15 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300), 0x12, 0xc40) 00:25:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x404802) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x8010, r0, 0xd9000) 00:25:15 executing program 3: syz_open_dev$vcsa(&(0x7f0000000300), 0x18, 0xc40) 00:25:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4230801}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4230801}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@multicast1, 0x0, 0x0, 0x50, 0x0, [{}, {@private}, {@dev}, {@empty}, {@empty}]}}) [ 1515.423038][ T6539] hsr_slave_0: entered promiscuous mode 00:25:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x404802) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x8010, r0, 0xd9000) [ 1515.451228][ T6539] hsr_slave_1: entered promiscuous mode 00:25:15 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300), 0x25, 0xc40) 00:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x7d7b, &(0x7f0000000480)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:25:15 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x401, 0x42bc00) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000080)={0x23, 0x80, 0x8a, 0x60}, 0x10) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb}, 0xc) [ 1515.482573][ T6539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1515.484618][ T6539] Cannot create hsr debugfs directory 00:25:15 executing program 3: syz_open_dev$vcsa(&(0x7f0000000300), 0x5c, 0xc40) 00:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x7d7b, &(0x7f0000000480)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1515.541397][ T6103] Bluetooth: hci5: command 0x0406 tx timeout 00:25:15 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x300, 0xc40) 00:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:25:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:15 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x401, 0x42bc00) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000080)={0x23, 0x80, 0x8a, 0x60}, 0x10) (async) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb}, 0xc) 00:25:15 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300), 0x500, 0xc40) 00:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) 00:25:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:25:15 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x600, 0xc40) 00:25:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0xc40) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r2, r0}}, 0x18) [ 1515.783454][T27530] hsr_slave_0: left promiscuous mode 00:25:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 00:25:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x8915, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x6c, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:25:15 executing program 3: syz_open_dev$vcsa(&(0x7f0000000300), 0x700, 0xc40) [ 1515.824706][T27530] hsr_slave_1: left promiscuous mode 00:25:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0xc40) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r2, r0}}, 0x18) 00:25:15 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x900, 0xc40) 00:25:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x8915, 0x0) (async) getsockopt$inet_udp_int(r1, 0x11, 0x6c, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1515.899730][T27530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1515.902288][T27530] batman_adv: batadv0: Removing interface: batadv_slave_0 00:25:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) [ 1515.917045][T27530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.923374][T27530] batman_adv: batadv0: Removing interface: batadv_slave_1 00:25:15 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300), 0xa00, 0xc40) [ 1515.940595][T27530] bridge_slave_1: left allmulticast mode [ 1515.942127][T27530] bridge_slave_1: left promiscuous mode [ 1515.943787][T27530] bridge0: port 2(bridge_slave_1) entered disabled state 00:25:15 executing program 3: r0 = inotify_init1(0x800) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20000012) inotify_rm_watch(r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) inotify_rm_watch(r0, r1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) 00:25:15 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) syz_open_dev$vcsa(&(0x7f0000000000), 0x9c4f, 0x280841) 00:25:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1515.982472][T27530] bridge_slave_0: left allmulticast mode [ 1515.984657][T27530] bridge_slave_0: left promiscuous mode [ 1515.986259][T27530] bridge0: port 1(bridge_slave_0) entered disabled state 00:25:15 executing program 3: syz_open_dev$vcsa(&(0x7f0000000300), 0xb00, 0xc40) 00:25:15 executing program 2: r0 = inotify_init1(0x800) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20000012) inotify_rm_watch(r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) inotify_rm_watch(r0, r1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) inotify_init1(0x800) (async) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20000012) (async) inotify_rm_watch(r0, r1) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) inotify_rm_watch(r0, r1) (async) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) (async) [ 1516.023203][ T29] INFO: task syz-executor.4:2424 blocked for more than 143 seconds. [ 1516.025632][ T29] Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1516.027496][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1516.030555][ T29] task:syz-executor.4 state:D stack:0 pid:2424 tgid:2422 ppid:582 flags:0x0000000d 00:25:16 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) syz_open_dev$vcsa(&(0x7f0000000000), 0x9c4f, 0x280841) 00:25:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 1516.046839][ T29] Call trace: 00:25:16 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0xc00, 0xc40) [ 1516.048462][ T29] __switch_to+0x314/0x560 [ 1516.054867][ T29] __schedule+0x1498/0x24b4 [ 1516.056157][ T29] schedule+0xb8/0x19c [ 1516.057226][ T29] schedule_preempt_disabled+0x18/0x2c [ 1516.066377][ T29] __mutex_lock_common+0xbd8/0x21a0 [ 1516.067793][ T29] mutex_lock_nested+0x2c/0x38 [ 1516.069416][ T29] bdev_release+0x100/0x870 [ 1516.070598][ T29] blkdev_release+0x40/0x54 [ 1516.071746][ T29] __fput+0x30c/0x738 [ 1516.072766][ T29] ____fput+0x20/0x30 [ 1516.073836][ T29] task_work_run+0x230/0x2e0 [ 1516.080137][ T29] do_notify_resume+0x178/0x1f4 [ 1516.082795][ T29] el0_svc+0xac/0x168 [ 1516.085116][ T29] el0t_64_sync_handler+0x84/0xfc [ 1516.088734][ T29] el0t_64_sync+0x190/0x194 [ 1516.095581][ T29] [ 1516.095581][ T29] Showing all locks held in the system: [ 1516.097692][ T29] 3 locks held by kworker/0:1/10: [ 1516.107125][ T29] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x560/0x1204 00:25:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x26004010) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x40, 0x0, [{@dev}, {@private}, {@dev}, {@empty}]}}) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x89a0, &(0x7f0000000640)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002000000001000000000000000816e14bb0000000000000000000000009a61b2b24a7cef213c9bb03cbea811de03aec4a25e0c661a379b03e2b81f2396e8a8c4adbc4b20ab881f52cead0fbebdb98c27898033c4d19a41"]}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="e6ffffffca8e03000000000080040000ac14149900000000020000"]}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) [ 1516.111167][ T29] #1: ffff800093987c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x5a0/0x1204 00:25:16 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000006, 0x20010, r0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000300), &(0x7f0000000180)=0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r3 = io_uring_setup(0x972, &(0x7f0000000340)={0x0, 0x8995, 0x592eea2bd2a5516c, 0x3, 0x1a9, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000008, 0x100010, r3, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7, r2, 0x0, 0x0, 0x1}}, 0x20) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf, 0x30, 0xffffffffffffffff, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x1010, r0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1000, @empty, 0x20}, {0xa, 0x4e22, 0x1, @remote, 0x7fffffff}, r2, 0x7fffffff}}, 0x48) [ 1516.114347][ T29] #2: ffff80009194f2e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 1516.123000][ T29] 1 lock held by khungtaskd/29: [ 1516.128194][ T29] #0: ffff80008ee74ac0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 1516.131388][ T29] 1 lock held by dhcpcd/5836: [ 1516.133994][ T29] #0: ffff80009194f2e8 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x10c/0x704 [ 1516.137089][ T29] 2 locks held by getty/5926: 00:25:16 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300), 0xd00, 0xc40) [ 1516.138457][ T29] #0: ffff0000d231d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 1516.141976][ T29] #1: ffff800093ff02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41c/0x1228 [ 1516.145081][ T29] 3 locks held by syz-fuzzer/6285: [ 1516.146780][ T29] #0: ffff0001b4035f58 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2e0/0x24b4 [ 1516.149727][ T29] #1: ffff0001b4021c88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3c0/0x618 [ 1516.152866][ T29] #2: ffff0001b4021c88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0x100/0x234 [ 1516.157497][ T29] 2 locks held by kworker/0:4/6247: [ 1516.160154][ T29] #0: ffff0000c0022538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x560/0x1204 [ 1516.163542][ T29] #1: ffff8000984f7c20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x5a0/0x1204 [ 1516.166876][ T29] 5 locks held by kworker/u4:36/27530: [ 1516.169143][ T29] #0: ffff0000c0023d38 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x560/0x1204 [ 1516.172176][ T29] #1: ffff800098137c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x5a0/0x1204 00:25:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) [ 1516.175136][ T29] #2: ffff800091943350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0x8d0 [ 1516.178490][ T29] #3: ffff80009194f2e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 1516.182119][ T29] #4: ffff80008ee7a3f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3ac/0x728 [ 1516.185288][ T29] 1 lock held by udevd/753: [ 1516.186780][ T29] #0: ffff0000caa624c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open_by_dev+0x180/0x7ec [ 1516.191706][ T29] 1 lock held by syz-executor.4/2424: [ 1516.197963][ T29] #0: ffff0000caa624c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x100/0x870 [ 1516.201073][ T29] 1 lock held by syz-executor.4/3513: 00:25:16 executing program 2: syz_open_dev$vcsa(&(0x7f0000000300), 0xe00, 0xc40) [ 1516.202652][ T29] #0: ffff0000caa624c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open_by_dev+0x180/0x7ec [ 1516.205763][ T29] 1 lock held by syz-executor.4/3521: [ 1516.210049][ T29] #0: ffff0000caa624c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open_by_dev+0x180/0x7ec [ 1516.214419][ T29] 1 lock held by syz-executor.4/3533: [ 1516.216443][ T29] #0: ffff0000caa624c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open_by_dev+0x180/0x7ec [ 1516.219582][ T29] 1 lock held by syz-executor.4/4844: [ 1516.223436][ T29] #0: ffff0000caa624c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open_by_dev+0x180/0x7ec [ 1516.227272][ T29] 1 lock held by syz-executor.4/6235: [ 1516.229645][ T29] #0: ffff0000caa624c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open_by_dev+0x180/0x7ec [ 1516.232486][ T29] 7 locks held by syz-executor.1/6523: 00:25:16 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000006, 0x20010, r0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) (async) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000300), &(0x7f0000000180)=0x4) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) (async) r3 = io_uring_setup(0x972, &(0x7f0000000340)={0x0, 0x8995, 0x592eea2bd2a5516c, 0x3, 0x1a9, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000008, 0x100010, r3, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7, r2, 0x0, 0x0, 0x1}}, 0x20) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf, 0x30, 0xffffffffffffffff, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x1010, r0, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1000, @empty, 0x20}, {0xa, 0x4e22, 0x1, @remote, 0x7fffffff}, r2, 0x7fffffff}}, 0x48) [ 1516.233867][ T29] #0: ffff0000d7e5a420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x368/0xc3c [ 1516.236385][ T29] #1: ffff0000c975b888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c [ 1516.240477][ T29] #2: ffff0000c688ea00 (kn->active#46){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c 00:25:16 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300), 0x1100, 0xc40) [ 1516.244930][ T29] #3: ffff800090b8f668 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xec/0x39c [ 1516.249394][ T29] #4: ffff0001080f60e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xbc/0x6a0 [ 1516.254968][ T29] #5: ffff00010a748250 (&devlink->lock_key#112){+.+.}-{3:3}, at: devl_lock+0x24/0x34 [ 1516.258504][ T29] #6: ffff80009194f2e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 1516.261325][ T29] 1 lock held by syz-executor.4/6539: [ 1516.262897][ T29] #0: ffff80009194f2e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x704/0xdbc [ 1516.265531][ T29] 1 lock held by syz-executor.3/6937: [ 1516.267040][ T29] #0: ffff80009194f2e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 1516.269940][ T29] 2 locks held by syz-executor.3/6942: [ 1516.271491][ T29] #0: ffff800091935428 (br_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x358/0x838 [ 1516.274107][ T29] #1: ffff80009194f2e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 1516.276579][ T29] 1 lock held by syz-executor.3/6947: [ 1516.278141][ T29] #0: ffff80009194f2e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 1516.281350][ T29] 1 lock held by syz-executor.0/6949: [ 1516.282887][ T29] 4 locks held by syz-executor.2/6952: 00:25:16 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0xc40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 00:25:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x2080) close$fd_v4l2_buffer(r1) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 1516.290150][ T29] #0: ffff0001b4035f58 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2e0/0x24b4 [ 1516.293131][ T29] #1: ffff0001b4021c88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3c0/0x618 [ 1516.306303][ T29] #2: ffff0000cc545eb8 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_sync_key+0x34/0x194 [ 1516.309557][ T29] #3: ffff0000cb01d9a8 (&____s->seqcount#4){....}-{0:0}, at: do_exit+0x1270/0x1f64 [ 1516.312674][ T29] [ 1516.313302][ T29] ============================================= [ 1516.313302][ T29] [ 1516.315759][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1516.317558][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1516.320073][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 1516.322799][ T29] Call trace: [ 1516.323720][ T29] dump_backtrace+0x1b8/0x1e4 [ 1516.325022][ T29] show_stack+0x2c/0x3c [ 1516.326156][ T29] dump_stack_lvl+0xd0/0x124 [ 1516.327354][ T29] dump_stack+0x1c/0x28 [ 1516.328426][ T29] panic+0x30c/0x88c [ 1516.329485][ T29] hung_task_panic+0x0/0x2c [ 1516.330728][ T29] kthread+0x288/0x310 [ 1516.331774][ T29] ret_from_fork+0x10/0x20 [ 1516.332954][ T29] SMP: stopping secondary CPUs [ 1516.334354][ T29] Kernel Offset: disabled [ 1516.335531][ T29] CPU features: 0x0,00000081,c0080094,42017203 [ 1516.337217][ T29] Memory Limit: none [ 1517.041869][ T29] Rebooting in 86400 seconds..