x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8001, 0x6}, 0x40310, 0x3, 0x1, 0x5, 0xe1, 0x2, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xa) 00:55:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:24 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3f, 0x5}, 0x8808, 0x7, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:24 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x41e7, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20000060) 00:55:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:24 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:24 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8001, 0x6}, 0x40310, 0x3, 0x1, 0x5, 0xe1, 0x2, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xa) 00:55:24 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3f, 0x5}, 0x8808, 0x7, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:24 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:24 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x6}, 0x40310, 0x3, 0x1, 0x5, 0xe1, 0x2, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xa) 00:55:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3f, 0x5}, 0x8808, 0x7, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:25 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x40310, 0x3, 0x1, 0x5, 0xe1, 0x2, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xa) 00:55:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2041}, 0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r2, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40310, 0x3, 0x1, 0x5, 0xe1, 0x2, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xa) 00:55:25 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3f, 0x5}, 0x8808, 0x7, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000025bd7000fedbdf250600000006001d000300000004000000080011000105000400c000000006001b004e2000001400ee60ff01000000000000000500000133de4f8074f2e79bab63b29175da2f45ce208414a3b411f263e51cb8e27bfd417ee695ed671123016f3090f54c51c659b98553b18949d49b8ea59e08d4b180a1eadea39a515953a2e963d9fa5006cfd10000002a1920af80a3e79f49734a7cd37b2509ca47e13e9d0b3649a3966e3526ae475bcb3388f9fdeb113b37f247163afbef24c70213cce83c8097929293ddb70e6cc4a95472e2bf195ae7670e40a4713dea2eabc34e3929b7b652f376f9b89252af01911d8a6344281fc93c41bfaff387534f3e6b93ba9a0dcd4beb887c616700668da4ffc673e5b53e80c8277a1f3502bd62cf22cc3b2aac96df0e6ce3ccc8eaaf33ba15c0f71897c82b5303628f9b8edc517b17ccf8fd9f071b0479f60f94134f717aaaa233d6333cfe0785b6c5ba50e8ee99b9fce7a0ae7004010e3dc8"], 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) 00:55:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3f, 0x5}, 0x8808, 0x7, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x1, 0x5, 0xe1, 0x2, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xa) [ 693.949604] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:55:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, 0x0, 0x0) 00:55:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) 00:55:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2041}, 0x1) getpgid(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3f, 0x5}, 0x8808, 0x7, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x5, 0xe1, 0x2, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xa) 00:55:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) [ 694.148147] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:55:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0xe1, 0x2, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xa) [ 694.229046] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:55:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x5}, 0x8808, 0x7, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) 00:55:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2041}, 0x1) getpgid(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x8808, 0x7, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x2, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xa) [ 694.440856] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:55:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000480)={0xf, 0x8, 0xfa00, {r4, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r2}}, 0x38) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x4}}, 0x20) 00:55:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x7, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) [ 694.500018] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:55:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xa) 00:55:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x4}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), 0xffffffffffffffff, r0}}, 0x18) 00:55:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xa) 00:55:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:26 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xb, 0xffffffffffffffff, 0xa) 00:55:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) 00:55:26 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:26 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 00:55:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x8, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) 00:55:26 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x8, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) 00:55:26 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x90f, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:26 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:55:27 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 00:55:27 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) 00:55:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 5: pipe(&(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2041}, 0x1) r2 = getpgid(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r4, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) getpgid(r2) 00:55:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 5: pipe(&(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 696.308215] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:27 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 696.361075] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 5: pipe(&(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:27 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 0 (fault-call:0 fault-nth:0): perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:27 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:27 executing program 5: pipe(&(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:27 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 5: pipe(&(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x20000070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:28 executing program 5: pipe(&(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) 00:55:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x22, 0x800, 0x9) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080), 0x4) 00:55:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) 00:55:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x9, 0xffffffffffffffff, 0x0) 00:55:28 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, 0x0) 00:55:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) 00:55:28 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) 00:55:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x4000800) 00:55:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, 0x0) 00:55:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004005) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x58}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1f}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x14080) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="d1ebb9f32f9db923575ca3eb3a8e0811", 0x10) 00:55:28 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 00:55:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, 0x0) 00:55:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x20000070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) [ 697.616454] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 697.687916] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x20000070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 697.752524] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:29 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x0, 0x17, @l2tp}, @L2TP_ATTR_RECV_TIMEOUT]}, 0x56}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 00:55:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x20000070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:29 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x7fff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, r3}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 00:55:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:29 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, 0x0) 00:55:29 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x70, 0x80, 0x9, 0xff, 0x80, 0x0, 0xff, 0x5002, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x7f, 0x0, 0xe, 0xfff, 0x1ff, 0x8001}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x3, 0x70, 0x97, 0x6, 0x81, 0x8, 0x0, 0x3, 0xc10d6, 0xa46d6c021f7a935, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x4200, 0x1000, 0x401, 0x3, 0xffffffff, 0xb5b}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x81, 0x8, 0x3f, 0x8, 0x0, 0xffffffffffffffff, 0x200, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000200), 0xc}, 0x100, 0x3, 0x2, 0x6, 0x82ac, 0xfffffff8, 0xfa5a}, 0x0, 0x1, r1, 0xb) 00:55:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, 0x0) 00:55:29 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:29 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x3, r0, 0x10, 0x0, @ib={0x1b, 0x6, 0x400, {"2d88e2c2d166da15c61db07a146ed7b0"}, 0x1, 0x8f, 0x100000000}}}, 0xa0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:29 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0x4000)=nil, 0x4000}, 0x0) 00:55:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:29 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x20000070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:29 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x20000070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x8808, 0x0, 0x0, 0x0, 0x39c7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:30 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x20000070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={[], 0x12}, 0xb4}, 0xa) r0 = accept(0xffffffffffffffff, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000380)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000003c0)={0xfffffffb, 0x3, 0x8167, 0x535e4c45, 0x3}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x2, 0x3, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000040)) 00:55:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={[], 0x12}, 0xb4}, 0xa) r0 = accept(0xffffffffffffffff, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000380)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000003c0)={0xfffffffb, 0x3, 0x8167, 0x535e4c45, 0x3}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x2, 0x3, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 00:55:30 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fddbdf250600000014000300fc00000000000000000000000000000108000400ac1414aa14000200fc00000000000000000000000000000114000600766c616e30000000000000000000000008000500e0000002140003b17776f56c24000000000000000000000000000000000114000300fe8000000000000000000000000000aa140006006e657470636930000000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, 0xfffffffffffffffe, 0x4) 00:55:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={[], 0x12}, 0xb4}, 0xa) r0 = accept(0xffffffffffffffff, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000380)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000003c0)={0xfffffffb, 0x3, 0x8167, 0x535e4c45, 0x3}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x2, 0x3, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x4000800) 00:55:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 00:55:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x80, 0x1, 0x46, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80, 0x0, 0x9, 0xfffffff9}}) 00:55:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={[], 0x12}, 0xb4}, 0xa) r0 = accept(0xffffffffffffffff, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000380)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000003c0)={0xfffffffb, 0x3, 0x8167, 0x535e4c45, 0x3}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x2, 0x3, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 00:55:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x81, 0x40, 0x5, 0x0, 0x0, 0xffff, 0x2, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x8000, 0x8001, 0x8, 0x1, 0x3, 0x1f, 0xbb7}, r1, 0x3, r0, 0x3) 00:55:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={[], 0x12}, 0xb4}, 0xa) accept(0xffffffffffffffff, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000380)=0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x2, 0x3, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:30 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fddbdf250600000014000300fc00000000000000000000000000000108000400ac1414aa14000200fc00000000000000000000000000000114000600766c616e30000000000000000000000008000500e0000002140003b17776f56c24000000000000000000000000000000000114000300fe8000000000000000000000000000aa140006006e657470636930000000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, 0xfffffffffffffffe, 0x4) 00:55:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={[], 0x12}, 0xb4}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x2, 0x3, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:31 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fddbdf250600000014000300fc00000000000000000000000000000108000400ac1414aa14000200fc00000000000000000000000000000114000600766c616e30000000000000000000000008000500e0000002140003b17776f56c24000000000000000000000000000000000114000300fe8000000000000000000000000000aa140006006e657470636930000000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, 0xfffffffffffffffe, 0x4) 00:55:31 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x200280) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, [], 0x23}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x40) write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12) 00:55:31 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004005) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x58}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1f}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x14080) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="d1ebb9f32f9db923575ca3eb3a8e0811", 0x10) 00:55:31 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x2, 0x3, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:31 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 699.783953] nla_parse: 1 callbacks suppressed [ 699.783963] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:55:31 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x8808, 0x0, 0x800000, 0x7, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x100, 0x0) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r2, &(0x7f0000000200)=r3, 0x12) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0x3f, 0xff, 0x6, 0x7, 0x0, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0xc08, 0x4, 0x4, 0x0, 0x2, 0x5, 0x9}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x8000, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r1, 0x12) 00:55:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 699.848201] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:55:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x2, 0x3, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:31 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:31 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fddbdf250600000014000300fc00000000000000000000000000000108000400ac1414aa14000200fc00000000000000000000000000000114000600766c616e30000000000000000000000008000500e0000002140003b17776f56c24000000000000000000000000000000000114000300fe8000000000000000000000000000aa140006006e657470636930000000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, 0xfffffffffffffffe, 0x4) 00:55:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:31 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:55:31 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x4080) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd64389ab12ae095e4105c19701f2f3195569ac977e440000c000200000014000500"/53], 0x30}, 0x1, 0x0, 0x0, 0x4089}, 0x4000) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) [ 700.090195] FAULT_INJECTION: forcing a failure. [ 700.090195] name failslab, interval 1, probability 0, space 0, times 0 00:55:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:31 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fddbdf250600000014000300fc00000000000000000000000000000108000400ac1414aa14000200fc00000000000000000000000000000114000600766c616e30000000000000000000000008000500e0000002140003b17776f56c24000000000000000000000000000000000114000300fe8000000000000000000000000000aa140006006e657470636930000000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, 0xfffffffffffffffe, 0x4) [ 700.144401] CPU: 1 PID: 6310 Comm: syz-executor.2 Not tainted 4.19.172-syzkaller #0 [ 700.153418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.164276] Call Trace: [ 700.166990] dump_stack+0x1fc/0x2ef [ 700.170908] should_fail.cold+0xa/0xf [ 700.175090] ? setup_fault_attr+0x200/0x200 [ 700.180175] ? lock_acquire+0x170/0x3c0 [ 700.184552] __should_failslab+0x115/0x180 [ 700.189734] should_failslab+0x5/0x10 00:55:31 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:55:31 executing program 0: r0 = socket(0x2c, 0x3, 0x80000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3bd9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7327}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xc1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) [ 700.193748] kmem_cache_alloc_node+0x245/0x3b0 [ 700.198711] __alloc_skb+0x71/0x560 [ 700.202977] netlink_sendmsg+0x9ee/0xc40 [ 700.207408] ? aa_af_perm+0x230/0x230 [ 700.211410] ? nlmsg_notify+0x1a0/0x1a0 [ 700.215876] ? kernel_recvmsg+0x220/0x220 [ 700.221071] ? nlmsg_notify+0x1a0/0x1a0 [ 700.225636] sock_sendmsg+0xc3/0x120 [ 700.229378] ___sys_sendmsg+0x7bb/0x8e0 [ 700.234584] ? check_preemption_disabled+0x41/0x280 [ 700.239801] ? copy_msghdr_from_user+0x440/0x440 [ 700.244942] ? __fget+0x32f/0x510 [ 700.248432] ? lock_downgrade+0x720/0x720 [ 700.253505] ? check_preemption_disabled+0x41/0x280 [ 700.259373] ? check_preemption_disabled+0x41/0x280 [ 700.265563] ? __fget+0x356/0x510 [ 700.269228] ? do_dup2+0x450/0x450 [ 700.272978] ? lock_downgrade+0x720/0x720 [ 700.277335] ? vfs_write+0x3d7/0x540 [ 700.282646] ? __fdget+0x1d0/0x230 [ 700.286609] __x64_sys_sendmsg+0x132/0x220 [ 700.291144] ? __sys_sendmsg+0x1b0/0x1b0 [ 700.295463] ? vfs_write+0x393/0x540 [ 700.299646] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 700.306045] ? trace_hardirqs_off_caller+0x6e/0x210 [ 700.311778] ? do_syscall_64+0x21/0x620 [ 700.316147] do_syscall_64+0xf9/0x620 [ 700.320691] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 700.326674] RIP: 0033:0x465b09 00:55:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 700.330321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 700.351618] RSP: 002b:00007f15c686f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.359802] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 700.367705] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 700.375611] RBP: 00007f15c686f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 700.383610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:55:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 700.391699] R13: 00007ffed124f69f R14: 00007f15c686f300 R15: 0000000000022000 00:55:31 executing program 2 (fault-call:2 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:31 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:55:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:31 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 700.522871] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:31 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fddbdf250600000014000300fc00000000000000000000000000000108000400ac1414aa14000200fc00000000000000000000000000000114000600766c616e30000000000000000000000008000500e0000002140003b17776f56c24000000000000000000000000000000000114000300fe8000000000000000000000000000aa140006006e657470636930000000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0xfffffffffffffffe, 0x4) 00:55:31 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xffff, 0x1d, 0x1}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r2}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r2, 0x1c, 0x0, @in={0x2, 0x4e23, @local}}}, 0xa0) [ 700.591035] FAULT_INJECTION: forcing a failure. [ 700.591035] name failslab, interval 1, probability 0, space 0, times 0 [ 700.648488] CPU: 1 PID: 6351 Comm: syz-executor.2 Not tainted 4.19.172-syzkaller #0 [ 700.659203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.670359] Call Trace: [ 700.672991] dump_stack+0x1fc/0x2ef [ 700.677269] should_fail.cold+0xa/0xf [ 700.682517] ? setup_fault_attr+0x200/0x200 [ 700.687770] ? lock_acquire+0x170/0x3c0 [ 700.692773] __should_failslab+0x115/0x180 [ 700.698492] should_failslab+0x5/0x10 [ 700.703123] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 700.708797] __kmalloc_node_track_caller+0x38/0x70 [ 700.714899] __alloc_skb+0xae/0x560 [ 700.721546] netlink_sendmsg+0x9ee/0xc40 [ 700.726461] ? aa_af_perm+0x230/0x230 [ 700.731178] ? nlmsg_notify+0x1a0/0x1a0 [ 700.736406] ? kernel_recvmsg+0x220/0x220 [ 700.742033] ? nlmsg_notify+0x1a0/0x1a0 [ 700.747285] sock_sendmsg+0xc3/0x120 [ 700.752713] ___sys_sendmsg+0x7bb/0x8e0 [ 700.758599] ? check_preemption_disabled+0x41/0x280 [ 700.766672] ? copy_msghdr_from_user+0x440/0x440 [ 700.774928] ? __fget+0x32f/0x510 [ 700.779773] ? lock_downgrade+0x720/0x720 [ 700.785842] ? check_preemption_disabled+0x41/0x280 [ 700.792767] ? check_preemption_disabled+0x41/0x280 [ 700.799002] ? __fget+0x356/0x510 [ 700.803348] ? do_dup2+0x450/0x450 [ 700.808235] ? lock_downgrade+0x720/0x720 [ 700.813765] ? vfs_write+0x3d7/0x540 [ 700.819192] ? __fdget+0x1d0/0x230 [ 700.823605] __x64_sys_sendmsg+0x132/0x220 [ 700.829274] ? __sys_sendmsg+0x1b0/0x1b0 [ 700.834537] ? vfs_write+0x393/0x540 [ 700.840401] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 00:55:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x4000800) 00:55:32 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:32 executing program 0: sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0xa, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x18}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x14}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 700.847382] ? trace_hardirqs_off_caller+0x6e/0x210 [ 700.854166] ? do_syscall_64+0x21/0x620 [ 700.858960] do_syscall_64+0xf9/0x620 [ 700.863446] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 700.870137] RIP: 0033:0x465b09 00:55:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 700.874862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 700.909242] RSP: 002b:00007f15c686f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.923414] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 700.932896] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 00:55:32 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fddbdf250600000014000300fc00000000000000000000000000000108000400ac1414aa14000200fc00000000000000000000000000000114000600766c616e30000000000000000000000008000500e0000002140003b17776f56c24000000000000000000000000000000000114000300fe8000000000000000000000000000aa140006006e657470636930000000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0xfffffffffffffffe, 0x4) 00:55:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) [ 700.942725] RBP: 00007f15c686f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 700.952629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.963411] R13: 00007ffed124f69f R14: 00007f15c686f300 R15: 0000000000022000 00:55:32 executing program 2 (fault-call:2 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:32 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:32 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:32 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fddbdf250600000014000300fc00000000000000000000000000000108000400ac1414aa14000200fc00000000000000000000000000000114000600766c616e30000000000000000000000008000500e0000002140003b17776f56c24000000000000000000000000000000000114000300fe8000000000000000000000000000aa140006006e657470636930000000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0xfffffffffffffffe, 0x4) 00:55:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) 00:55:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) [ 701.217926] FAULT_INJECTION: forcing a failure. [ 701.217926] name failslab, interval 1, probability 0, space 0, times 0 00:55:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x22, 0x80000, 0xffffffd2) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080)="fc70babbd5ce599ac60bc4e7b67764a8bfbfcaccc53567bd51bc07a2e176e4390dd8fc5ac2a22367865f11447318ef4c65d8ab88380a373d3f209e6dfc8818cd6be1417f8eac88411efaeca7c0e58060", &(0x7f0000000100)=@tcp6=r0, 0x4}, 0x20) [ 701.322674] CPU: 0 PID: 6399 Comm: syz-executor.2 Not tainted 4.19.172-syzkaller #0 [ 701.335461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.351828] Call Trace: [ 701.355107] dump_stack+0x1fc/0x2ef [ 701.360649] should_fail.cold+0xa/0xf 00:55:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x0, 0x3, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) [ 701.367150] ? setup_fault_attr+0x200/0x200 [ 701.375305] ? lock_downgrade+0x720/0x720 [ 701.381675] ? check_preemption_disabled+0x41/0x280 [ 701.390591] __should_failslab+0x115/0x180 [ 701.399769] should_failslab+0x5/0x10 [ 701.405834] kmem_cache_alloc+0x3f/0x370 [ 701.411654] skb_clone+0x151/0x3d0 [ 701.418279] netlink_deliver_tap+0x955/0xb00 [ 701.427102] netlink_unicast+0x545/0x690 [ 701.433251] ? netlink_sendskb+0x110/0x110 [ 701.444928] ? _copy_from_iter_full+0x229/0x7c0 [ 701.455708] ? __phys_addr_symbol+0x2c/0x70 [ 701.465685] ? __check_object_size+0x17b/0x3e0 [ 701.474520] netlink_sendmsg+0x6bb/0xc40 [ 701.483175] ? aa_af_perm+0x230/0x230 [ 701.488391] ? nlmsg_notify+0x1a0/0x1a0 [ 701.494544] ? kernel_recvmsg+0x220/0x220 [ 701.500258] ? nlmsg_notify+0x1a0/0x1a0 [ 701.507352] sock_sendmsg+0xc3/0x120 [ 701.512312] ___sys_sendmsg+0x7bb/0x8e0 [ 701.518790] ? check_preemption_disabled+0x41/0x280 [ 701.527032] ? copy_msghdr_from_user+0x440/0x440 [ 701.533511] ? __fget+0x32f/0x510 [ 701.538277] ? lock_downgrade+0x720/0x720 [ 701.546065] ? check_preemption_disabled+0x41/0x280 [ 701.554701] ? check_preemption_disabled+0x41/0x280 [ 701.563474] ? __fget+0x356/0x510 [ 701.569556] ? do_dup2+0x450/0x450 [ 701.576160] ? lock_downgrade+0x720/0x720 [ 701.584965] ? vfs_write+0x3d7/0x540 [ 701.590894] ? __fdget+0x1d0/0x230 [ 701.595068] __x64_sys_sendmsg+0x132/0x220 [ 701.600725] ? __sys_sendmsg+0x1b0/0x1b0 [ 701.605892] ? vfs_write+0x393/0x540 [ 701.611198] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 701.619169] ? trace_hardirqs_off_caller+0x6e/0x210 [ 701.626362] ? do_syscall_64+0x21/0x620 [ 701.631259] do_syscall_64+0xf9/0x620 [ 701.637687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 701.648207] RIP: 0033:0x465b09 [ 701.654226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 701.700480] RSP: 002b:00007f15c686f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.716855] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 701.731493] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 701.743131] RBP: 00007f15c686f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 701.757760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.770272] R13: 00007ffed124f69f R14: 00007f15c686f300 R15: 0000000000022000 00:55:33 executing program 2 (fault-call:2 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x5, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4000800) 00:55:33 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, 0xfffffffffffffffe, 0x4) 00:55:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x8, 0x200000) 00:55:33 executing program 4: r0 = socket(0x2c, 0x3, 0x80000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3bd9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7327}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xc1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) 00:55:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x10, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 701.931049] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 701.951314] FAULT_INJECTION: forcing a failure. [ 701.951314] name failslab, interval 1, probability 0, space 0, times 0 00:55:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 00:55:33 executing program 4: r0 = socket(0x2c, 0x3, 0x80000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3bd9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7327}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xc1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) 00:55:33 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, 0xfffffffffffffffe, 0x4) 00:55:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 702.114889] CPU: 1 PID: 6444 Comm: syz-executor.2 Not tainted 4.19.172-syzkaller #0 [ 702.130206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.135622] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 702.144673] Call Trace: [ 702.144764] dump_stack+0x1fc/0x2ef [ 702.144784] should_fail.cold+0xa/0xf [ 702.181370] ? setup_fault_attr+0x200/0x200 [ 702.188010] ? lock_acquire+0x170/0x3c0 [ 702.195922] __should_failslab+0x115/0x180 [ 702.201686] should_failslab+0x5/0x10 [ 702.208682] kmem_cache_alloc_node+0x245/0x3b0 [ 702.216484] __alloc_skb+0x71/0x560 [ 702.222029] netlink_ack+0x27d/0xae0 [ 702.227580] ? __radix_tree_lookup+0x216/0x370 [ 702.235601] ? netlink_sendmsg+0xc40/0xc40 [ 702.242302] netlink_rcv_skb+0x353/0x440 [ 702.248838] ? genl_family_rcv_msg+0xc40/0xc40 [ 702.254566] ? netlink_ack+0xae0/0xae0 [ 702.259671] ? genl_rcv+0x15/0x40 [ 702.264524] genl_rcv+0x24/0x40 [ 702.268972] netlink_unicast+0x4d5/0x690 [ 702.274947] ? netlink_sendskb+0x110/0x110 [ 702.281247] ? _copy_from_iter_full+0x229/0x7c0 [ 702.288743] ? __phys_addr_symbol+0x2c/0x70 [ 702.295505] ? __check_object_size+0x17b/0x3e0 [ 702.303221] netlink_sendmsg+0x6bb/0xc40 [ 702.309996] ? aa_af_perm+0x230/0x230 [ 702.316491] ? nlmsg_notify+0x1a0/0x1a0 [ 702.325521] ? kernel_recvmsg+0x220/0x220 [ 702.333861] ? nlmsg_notify+0x1a0/0x1a0 [ 702.344885] sock_sendmsg+0xc3/0x120 [ 702.355988] ___sys_sendmsg+0x7bb/0x8e0 [ 702.363818] ? check_preemption_disabled+0x41/0x280 [ 702.371963] ? copy_msghdr_from_user+0x440/0x440 [ 702.380317] ? __fget+0x32f/0x510 [ 702.386868] ? lock_downgrade+0x720/0x720 [ 702.391917] ? check_preemption_disabled+0x41/0x280 [ 702.401158] ? check_preemption_disabled+0x41/0x280 [ 702.411619] ? __fget+0x356/0x510 [ 702.417469] ? do_dup2+0x450/0x450 [ 702.424157] ? lock_downgrade+0x720/0x720 [ 702.432186] ? vfs_write+0x3d7/0x540 [ 702.438562] ? __fdget+0x1d0/0x230 [ 702.444479] __x64_sys_sendmsg+0x132/0x220 [ 702.451426] ? __sys_sendmsg+0x1b0/0x1b0 [ 702.460433] ? vfs_write+0x393/0x540 [ 702.467752] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 702.477501] ? trace_hardirqs_off_caller+0x6e/0x210 [ 702.484495] ? do_syscall_64+0x21/0x620 [ 702.491291] do_syscall_64+0xf9/0x620 [ 702.499090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 702.509650] RIP: 0033:0x465b09 [ 702.514095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 702.545162] RSP: 002b:00007f15c686f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.558617] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 702.569486] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 702.581546] RBP: 00007f15c686f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 702.594216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.610052] R13: 00007ffed124f69f R14: 00007f15c686f300 R15: 0000000000022000 00:55:34 executing program 2 (fault-call:2 fault-nth:4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:34 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x8808, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:34 executing program 4: r0 = socket(0x2c, 0x3, 0x80000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3bd9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7327}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xc1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) 00:55:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:34 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, 0xfffffffffffffffe, 0x4) 00:55:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 00:55:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 702.748928] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:55:34 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x6, 0x3, 0x3f, 0x0, 0xffffffffffff62e6, 0x20, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x4000, 0x4, 0x5, 0x0, 0x20, 0xae, 0x8}, 0xffffffffffffffff, 0x7, r0, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x0, 0x70, 0x34, 0x8, 0x7, 0x3f, 0x0, 0x3fff80000000, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x85537825649a3f2f, 0x7, 0x9, 0x0, 0x52, 0x20, 0x200}) 00:55:34 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, 0xfffffffffffffffe, 0x4) [ 702.843225] FAULT_INJECTION: forcing a failure. [ 702.843225] name failslab, interval 1, probability 0, space 0, times 0 00:55:34 executing program 4: r0 = socket(0x2c, 0x3, 0x80000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3bd9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7327}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xc1) 00:55:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) [ 702.958577] CPU: 1 PID: 6483 Comm: syz-executor.2 Not tainted 4.19.172-syzkaller #0 [ 702.970340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.982784] Call Trace: [ 702.987416] dump_stack+0x1fc/0x2ef [ 702.993326] should_fail.cold+0xa/0xf [ 702.998014] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 702.999567] ? setup_fault_attr+0x200/0x200 [ 702.999585] ? lock_acquire+0x170/0x3c0 [ 702.999605] __should_failslab+0x115/0x180 [ 703.035162] should_failslab+0x5/0x10 [ 703.041339] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 703.048852] __kmalloc_node_track_caller+0x38/0x70 [ 703.056098] __alloc_skb+0xae/0x560 [ 703.061158] netlink_ack+0x27d/0xae0 [ 703.066438] ? __radix_tree_lookup+0x216/0x370 [ 703.072799] ? netlink_sendmsg+0xc40/0xc40 [ 703.078211] netlink_rcv_skb+0x353/0x440 [ 703.084283] ? genl_family_rcv_msg+0xc40/0xc40 [ 703.089672] ? netlink_ack+0xae0/0xae0 [ 703.095706] ? genl_rcv+0x15/0x40 [ 703.099997] genl_rcv+0x24/0x40 [ 703.104188] netlink_unicast+0x4d5/0x690 [ 703.111074] ? netlink_sendskb+0x110/0x110 [ 703.118300] ? _copy_from_iter_full+0x229/0x7c0 [ 703.125046] ? __phys_addr_symbol+0x2c/0x70 [ 703.130979] ? __check_object_size+0x17b/0x3e0 [ 703.137885] netlink_sendmsg+0x6bb/0xc40 [ 703.143609] ? aa_af_perm+0x230/0x230 [ 703.149007] ? nlmsg_notify+0x1a0/0x1a0 [ 703.154044] ? kernel_recvmsg+0x220/0x220 [ 703.159449] ? nlmsg_notify+0x1a0/0x1a0 [ 703.164449] sock_sendmsg+0xc3/0x120 [ 703.169583] ___sys_sendmsg+0x7bb/0x8e0 [ 703.174478] ? check_preemption_disabled+0x41/0x280 [ 703.183170] ? copy_msghdr_from_user+0x440/0x440 [ 703.190088] ? __fget+0x32f/0x510 [ 703.197282] ? lock_downgrade+0x720/0x720 [ 703.204316] ? check_preemption_disabled+0x41/0x280 [ 703.214008] ? check_preemption_disabled+0x41/0x280 [ 703.221726] ? __fget+0x356/0x510 [ 703.227532] ? do_dup2+0x450/0x450 [ 703.233746] ? lock_downgrade+0x720/0x720 [ 703.239620] ? vfs_write+0x3d7/0x540 [ 703.246512] ? __fdget+0x1d0/0x230 [ 703.252296] __x64_sys_sendmsg+0x132/0x220 [ 703.257375] ? __sys_sendmsg+0x1b0/0x1b0 [ 703.264290] ? vfs_write+0x393/0x540 [ 703.270900] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 703.280885] ? trace_hardirqs_off_caller+0x6e/0x210 [ 703.287810] ? do_syscall_64+0x21/0x620 [ 703.294064] do_syscall_64+0xf9/0x620 [ 703.301493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 703.309667] RIP: 0033:0x465b09 [ 703.314562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 703.345386] RSP: 002b:00007f15c686f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.360713] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 703.373292] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 703.387416] RBP: 00007f15c686f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 703.398742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.414202] R13: 00007ffed124f69f R14: 00007f15c686f300 R15: 0000000000022000 00:55:34 executing program 2 (fault-call:2 fault-nth:5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 00:55:34 executing program 4: r0 = socket(0x2c, 0x3, 0x80000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3bd9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7327}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:34 executing program 0: sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x20, 0x70bd2d, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000080}, 0x440) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40088}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:34 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, 0xfffffffffffffffe, 0x4) [ 703.555587] FAULT_INJECTION: forcing a failure. [ 703.555587] name failslab, interval 1, probability 0, space 0, times 0 [ 703.592216] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 703.617559] CPU: 1 PID: 6519 Comm: syz-executor.2 Not tainted 4.19.172-syzkaller #0 [ 703.628205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.642871] Call Trace: [ 703.647040] dump_stack+0x1fc/0x2ef [ 703.652839] should_fail.cold+0xa/0xf [ 703.657122] ? setup_fault_attr+0x200/0x200 [ 703.663143] ? sk_filter_trim_cap+0x497/0x7d0 [ 703.670811] __should_failslab+0x115/0x180 [ 703.677475] should_failslab+0x5/0x10 [ 703.685996] kmem_cache_alloc+0x3f/0x370 [ 703.692934] skb_clone+0x151/0x3d0 [ 703.697757] netlink_deliver_tap+0x955/0xb00 [ 703.703858] netlink_sendskb+0x6c/0x110 [ 703.710826] netlink_unicast+0x5b3/0x690 [ 703.715894] ? netlink_sendskb+0x110/0x110 [ 703.722005] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 703.722196] ? memset+0x20/0x40 [ 703.738392] ? __nlmsg_put+0x155/0x1c0 [ 703.744394] netlink_ack+0x628/0xae0 [ 703.750260] ? netlink_sendmsg+0xc40/0xc40 [ 703.756438] netlink_rcv_skb+0x353/0x440 [ 703.763370] ? genl_family_rcv_msg+0xc40/0xc40 [ 703.770595] ? netlink_ack+0xae0/0xae0 [ 703.777370] ? genl_rcv+0x15/0x40 [ 703.782097] genl_rcv+0x24/0x40 [ 703.786830] netlink_unicast+0x4d5/0x690 [ 703.792162] ? netlink_sendskb+0x110/0x110 [ 703.798454] ? _copy_from_iter_full+0x229/0x7c0 [ 703.804997] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:55:34 executing program 0: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x6a006}, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 00:55:35 executing program 4: r0 = socket(0x2c, 0x3, 0x80000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3bd9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7327}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 00:55:35 executing program 4: socket(0x2c, 0x3, 0x80000001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) 00:55:35 executing program 4: socket(0x2c, 0x3, 0x80000001) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') [ 703.805350] ? __phys_addr_symbol+0x2c/0x70 [ 703.805369] ? __check_object_size+0x17b/0x3e0 [ 703.835089] netlink_sendmsg+0x6bb/0xc40 [ 703.839911] ? aa_af_perm+0x230/0x230 [ 703.845487] ? nlmsg_notify+0x1a0/0x1a0 [ 703.851695] ? kernel_recvmsg+0x220/0x220 [ 703.858192] ? nlmsg_notify+0x1a0/0x1a0 [ 703.863402] sock_sendmsg+0xc3/0x120 [ 703.867324] ___sys_sendmsg+0x7bb/0x8e0 [ 703.872716] ? check_preemption_disabled+0x41/0x280 [ 703.880309] ? copy_msghdr_from_user+0x440/0x440 [ 703.886958] ? __fget+0x32f/0x510 [ 703.891901] ? lock_downgrade+0x720/0x720 [ 703.897417] ? check_preemption_disabled+0x41/0x280 [ 703.903684] ? check_preemption_disabled+0x41/0x280 [ 703.910958] ? __fget+0x356/0x510 00:55:35 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x401}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x811) [ 703.916256] ? do_dup2+0x450/0x450 [ 703.920550] ? lock_downgrade+0x720/0x720 [ 703.927335] ? vfs_write+0x3d7/0x540 [ 703.932742] ? __fdget+0x1d0/0x230 [ 703.939553] __x64_sys_sendmsg+0x132/0x220 [ 703.945426] ? __sys_sendmsg+0x1b0/0x1b0 [ 703.951053] ? vfs_write+0x393/0x540 [ 703.955658] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 703.965210] ? trace_hardirqs_off_caller+0x6e/0x210 [ 703.972010] ? do_syscall_64+0x21/0x620 [ 703.979483] do_syscall_64+0xf9/0x620 [ 703.985524] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 703.992552] RIP: 0033:0x465b09 [ 703.996963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 704.021865] RSP: 002b:00007f15c686f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.031331] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 704.042795] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 704.055042] RBP: 00007f15c686f1d0 R08: 0000000000000000 R09: 0000000000000000 00:55:35 executing program 2 (fault-call:2 fault-nth:6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:35 executing program 4: socket(0x2c, 0x3, 0x80000001) socket$nl_generic(0x10, 0x3, 0x10) 00:55:35 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:35 executing program 3: r0 = socket(0x2c, 0x3, 0x80000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3bd9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7327}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="67446698010000000000040001000000395847f6ab9b8108d6521fd0a200eb6d47ccbe5bd70f793417badc85b0734deef92007c3a84d27078265f151069f3c39c3abeb6d3922a19490903d7d5a89da02d17d9e7521fde2e029895d29e2eec85d5cecd14ec11ba2853a4adda3286effdcc53c1b266bc5288446d21852abcd35e6e0603fee00b5c8de89a1ea9a8fc32cd5d72ed3ee0e05249614bcff85f59cca27c4b572f3d77cf5b79e06ca24b9e9c7f558181c130b251e8de8084a6d55ee753038bf152f86afacac5d039034739ea3c9994c9d5e4f60f38c956457e4bfed4feb895216f61a5e9581a19947a398620f54d5f764ac62c62757c49c471f4f73396f7d2edbb5"], 0xc1) 00:55:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:35 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, 0xfffffffffffffffe, 0x4) [ 704.065950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.078774] R13: 00007ffed124f69f R14: 00007f15c686f300 R15: 0000000000022000 00:55:35 executing program 4: socket(0x2c, 0x3, 0x80000001) 00:55:35 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, 0xfffffffffffffffe, 0x4) 00:55:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:35 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x4, 0xfa, 0x1, 0x4, 0x0, 0x400, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x72a}, 0x4001, 0x3, 0x1ff, 0x6, 0xa88, 0x8, 0x7}, 0x0, 0x10, r0, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x0, 0x70, 0x1, 0x1, 0xff, 0x9, 0x0, 0xd, 0x5, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x7, 0x4, 0x81, 0x80000001, 0x4}) 00:55:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:35 executing program 4: socket(0x0, 0x3, 0x80000001) 00:55:35 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, 0xfffffffffffffffe, 0x4) 00:55:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:35 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, 0xfffffffffffffffe, 0x4) 00:55:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd87) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x91}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0xc094) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x44011) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000340)={0x3, 0x70, 0x6, 0x1, 0x37, 0xcf, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x5}, 0x4042, 0x4, 0x1, 0x0, 0x200, 0x3, 0x1ff}) 00:55:35 executing program 4: socket(0x0, 0x3, 0x80000001) 00:55:35 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)) socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0xfffffffffffffffe, 0x4) 00:55:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:36 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x20, 0x0, 0xd6, 0x6, 0x0, 0x3, 0x2, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x5, 0x8}, 0x2, 0xffffffffffffffe0, 0x80, 0x2, 0x0, 0x7fffffff, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x2) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) 00:55:36 executing program 4: socket(0x0, 0x3, 0x80000001) 00:55:36 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0xfffffffffffffffe, 0x4) 00:55:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x6}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:36 executing program 4: socket(0x2c, 0x0, 0x80000001) 00:55:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb63) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 00:55:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0xfffffffffffffffe, 0x4) 00:55:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x7}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:36 executing program 4: socket(0x2c, 0x0, 0x80000001) 00:55:36 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0xfffffffffffffffe, 0x4) 00:55:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:36 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x20, 0x81, 0x0, 0x3, 0x2c1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x18313, 0x7, 0xe9, 0x1, 0x3, 0x7fffffff, 0x2}) 00:55:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0xa}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:36 executing program 4: socket(0x2c, 0x0, 0x80000001) 00:55:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:36 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0xfffffffffffffffe, 0x4) 00:55:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:36 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004484}, 0x0) 00:55:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0xc}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:36 executing program 4: socket(0x2c, 0x3, 0x0) 00:55:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:36 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0xfffffffffffffffe, 0x4) 00:55:36 executing program 4: socket(0x2c, 0x3, 0x0) 00:55:36 executing program 3: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:36 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x1, 0x70, 0xf, 0x5, 0x5d, 0x7, 0x0, 0x5, 0x1022, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x8280, 0x10001, 0x6, 0x5, 0x5, 0xffffffe0, 0xf732}) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffff5dd) 00:55:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x6558}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0xfffffffffffffffe, 0x0) 00:55:37 executing program 4: socket(0x2c, 0x3, 0x0) 00:55:37 executing program 3: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x8100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:37 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = getpgid(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xff, 0x7, 0x80, 0x2, 0x0, 0x3ff, 0x8080, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x14, 0x2, @perf_bp={&(0x7f0000000080)}, 0x10101, 0x8000, 0xffffffff, 0x1, 0x6, 0x7fffffff, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r6}}, 0x38) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @ib={0x1b, 0x1, 0x2, {"b2927d55b3efde0b3a4eaad8abce2fb7"}, 0xc16, 0x7, 0x59}}}, 0x90) 00:55:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x6558}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:37 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004484}, 0x0) 00:55:37 executing program 3: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:37 executing program 1: socket(0x2c, 0x3, 0x0) 00:55:37 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004484}, 0x0) 00:55:37 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:55:37 executing program 1: socket(0x2c, 0x3, 0x0) 00:55:38 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004484}, 0x0) 00:55:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:38 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:38 executing program 1: socket(0x2c, 0x3, 0x0) 00:55:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x4000800) 00:55:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x2, 0x3, @mcast1}, r3}}, 0x38) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r3}}, 0xc) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r5}}, 0x38) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r5}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 00:55:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:38 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:38 executing program 1: socket(0x0, 0x3, 0x0) 00:55:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x6}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:38 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640)='NLBL_UNLBL\x00') 00:55:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x4, 0x0, 0xfc000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 00:55:38 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = getpgid(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xff, 0x7, 0x80, 0x2, 0x0, 0x3ff, 0x8080, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x14, 0x2, @perf_bp={&(0x7f0000000080)}, 0x10101, 0x8000, 0xffffffff, 0x1, 0x6, 0x7fffffff, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r6}}, 0x38) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @ib={0x1b, 0x1, 0x2, {"b2927d55b3efde0b3a4eaad8abce2fb7"}, 0xc16, 0x7, 0x59}}}, 0x90) 00:55:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:55:38 executing program 1: socket(0x0, 0x3, 0x0) 00:55:38 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:55:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:38 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x3, 0x70, 0xbb, 0x2, 0x6, 0x3f, 0x0, 0xffffffffffff9c31, 0x20800, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xff, 0x6}, 0x200, 0x7, 0x5, 0x1, 0x1f, 0xab0, 0x7ff}) 00:55:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:55:38 executing program 1: socket(0x0, 0x3, 0x0) 00:55:38 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) socket$nl_generic(0x10, 0x3, 0x10) 00:55:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0xe}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:55:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:39 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = getpgid(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xff, 0x7, 0x80, 0x2, 0x0, 0x3ff, 0x8080, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x14, 0x2, @perf_bp={&(0x7f0000000080)}, 0x10101, 0x8000, 0xffffffff, 0x1, 0x6, 0x7fffffff, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r6}}, 0x38) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @ib={0x1b, 0x1, 0x2, {"b2927d55b3efde0b3a4eaad8abce2fb7"}, 0xc16, 0x7, 0x59}}}, 0x90) 00:55:39 executing program 1: socket(0x2c, 0x0, 0x0) 00:55:39 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) 00:55:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000100)={0x10001, 0x9}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x3, 0x2, "87d7c96f09e7d019431fa04280139cd1ba11ca324838a6c455ede6a8edf313e0", 0x2, 0x9, 0x3, 0x80000001, 0xa1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x9, 0x1, 0x6, 0x7fffffff}, {0x7, 0x0, 0x1f, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000240)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x140, 0x0) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000180)={0x80000000, 0x8}) 00:55:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0xf}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 707.931207] Bluetooth: hci2: command 0x0401 tx timeout 00:55:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x60}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:39 executing program 1: socket(0x2c, 0x0, 0x0) 00:55:39 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) 00:55:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20044414) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x100) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x103001) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:39 executing program 1: socket(0x2c, 0x0, 0x0) 00:55:40 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = getpgid(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xff, 0x7, 0x80, 0x2, 0x0, 0x3ff, 0x8080, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x14, 0x2, @perf_bp={&(0x7f0000000080)}, 0x10101, 0x8000, 0xffffffff, 0x1, 0x6, 0x7fffffff, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r6}}, 0x38) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @ib={0x1b, 0x1, 0x2, {"b2927d55b3efde0b3a4eaad8abce2fb7"}, 0xc16, 0x7, 0x59}}}, 0x90) 00:55:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0xf0}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:40 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) 00:55:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:40 executing program 0: r0 = socket(0x0, 0x0, 0x200) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'syz_tun\x00'}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008041}, 0x8810) 00:55:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x60}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, 0x0}, 0x0) 00:55:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:40 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:55:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x600}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:40 executing program 0: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000080)=""/220) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext, 0x89a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, 0x0}, 0x0) 00:55:41 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = getpgid(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xff, 0x7, 0x80, 0x2, 0x0, 0x3ff, 0x8080, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x14, 0x2, @perf_bp={&(0x7f0000000080)}, 0x10101, 0x8000, 0xffffffff, 0x1, 0x6, 0x7fffffff, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r6}}, 0x38) 00:55:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0xe00}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:41 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) socket$nl_generic(0x10, 0x3, 0x10) 00:55:41 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:55:41 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x48800}, 0xc0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, 0x0}, 0x0) 00:55:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0xf00}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000340)={0x0}}, 0x0) 00:55:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2}, 0xc, 0x0}, 0x0) 00:55:41 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x2000, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4015}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x5, 0x70, 0xfb, 0x6, 0x80, 0x41, 0x0, 0x0, 0x71408, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf20f, 0x4, @perf_config_ext={0x8, 0x6f44}, 0x1000, 0x200, 0x6, 0x9, 0x40, 0x4, 0x401}) 00:55:41 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) [ 710.010861] Bluetooth: hci2: command 0x0401 tx timeout 00:55:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x1caa}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:42 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) 00:55:42 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) socket$nl_generic(0x10, 0x3, 0x10) 00:55:42 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = getpgid(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xff, 0x7, 0x80, 0x2, 0x0, 0x3ff, 0x8080, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x14, 0x2, @perf_bp={&(0x7f0000000080)}, 0x10101, 0x8000, 0xffffffff, 0x1, 0x6, 0x7fffffff, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f}}, 0x20) 00:55:42 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) 00:55:42 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4b514b7a328bf953}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 00:55:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x6000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:42 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 00:55:42 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:42 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = getpgid(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xff, 0x7, 0x80, 0x2, 0x0, 0x3ff, 0x8080, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x14, 0x2, @perf_bp={&(0x7f0000000080)}, 0x10101, 0x8000, 0xffffffff, 0x1, 0x6, 0x7fffffff, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r6}}, 0x38) 00:55:42 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:55:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0xaa1c}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:42 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:55:42 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffffffffffe, 0xe5804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb8b}, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_tid_address(&(0x7f00000000c0)) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000080)={0x0, 0x7, 0x0}) 00:55:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0xf000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:43 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:55:43 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = getpgid(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xff, 0x7, 0x80, 0x2, 0x0, 0x3ff, 0x8080, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x14, 0x2, @perf_bp={&(0x7f0000000080)}, 0x10101, 0x8000, 0xffffffff, 0x1, 0x6, 0x7fffffff, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 00:55:43 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) 00:55:43 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x8808, 0x0, 0x0, 0x0, 0x95b, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x301540) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000280)="794364996464ff34a971f46032270990", 0x10) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4004011) 00:55:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0xffff}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:43 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) socket$nl_generic(0x10, 0x3, 0x10) 00:55:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0xaa1c}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:43 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) 00:55:43 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x2, 0x70bd29, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x4000000) 00:55:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x8808, 0x0, 0x0, 0x0, 0x95b, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x301540) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000280)="794364996464ff34a971f46032270990", 0x10) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4004011) 00:55:43 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) 00:55:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 712.090776] Bluetooth: hci2: command 0x0401 tx timeout 00:55:43 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = getpgid(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xff, 0x7, 0x80, 0x2, 0x0, 0x3ff, 0x8080, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x14, 0x2, @perf_bp={&(0x7f0000000080)}, 0x10101, 0x8000, 0xffffffff, 0x1, 0x6, 0x7fffffff, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) 00:55:43 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) 00:55:43 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000280)="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", 0x170) 00:55:43 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) socket$nl_generic(0x10, 0x3, 0x10) 00:55:43 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:55:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:44 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) 00:55:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'veth1\x00'}) 00:55:44 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) socket$nl_generic(0x10, 0x3, 0x10) 00:55:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x6}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:44 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) 00:55:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:44 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = getpgid(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xff, 0x7, 0x80, 0x2, 0x0, 0x3ff, 0x8080, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x14, 0x2, @perf_bp={&(0x7f0000000080)}, 0x10101, 0x8000, 0xffffffff, 0x1, 0x6, 0x7fffffff, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 00:55:44 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200240) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x4, 0x70, 0x0, 0x3f, 0x80, 0x3, 0x0, 0xab, 0x5300, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0x7f}, 0x40, 0x6, 0x7, 0x6, 0x4, 0x5, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="7a94ffff9ca4cd2328bdb6d821eeda754958c4963d0e7e505c0fe47d5840f06e5a8735da7c30c5a007de158d2f298e3fed56bc615169d88bfa858e3ce1373fe5fc79aa0e972bed9d34607ec918de0eda4c4d0f15f9412b7ace70a8dd0b5617b16117681ec6bb7cd92bcc62ee03de29dcf35ad25796baff13b65de19729fc08203b5638f2b8efc7d803bb5469dc1d4ac6e93f34478d78196ebf27290629b7a1e0b9b3dde4f52a2aeff458809eb3acc6cd469879", @ANYRES16=0x0, @ANYBLOB="000029bd7000ffdbdf250400000005000400050000ff0c2e048001005000000000007bb5e869767275714d2b6ac5926b2b4388b3180568e154a4859b6657858f5cddaed615e03fecf9002c7e349b7e0e709e51f6a18567bdc0cb2758ee0b5bef53ffa709a1e20700af0c76b3ec1a361b5f968f2cb3e0adaf9294882852f4b540234a05db7093759acdb8fcbd85cec420616b2d327bca3fb64c69e68d3a49f4a9f72cfb75c1ae8ecc4885267ef7290567452454a414"], 0x28}, 0x1, 0x0, 0x0, 0x20040890}, 0x24048004) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000240)={0x1, 0x70, 0xa6, 0x81, 0x6, 0x6, 0x0, 0xbe, 0x8000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0xa30, 0x3}, 0x50a4, 0x22, 0x7fffffff, 0x9, 0x7, 0x9}) 00:55:44 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) 00:55:44 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) socket$nl_generic(0x10, 0x3, 0x10) 00:55:44 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:45 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xe}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:45 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) 00:55:45 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) 00:55:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x10) clock_gettime(0x2, &(0x7f0000000400)) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r6 = accept(r2, &(0x7f0000000200)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x80) r7 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r7, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @local}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '/dev/input/mice\x00'}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '/dev/input/mice\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x24048014}, 0x24048815) 00:55:45 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 713.894926] nla_parse: 5 callbacks suppressed [ 713.894937] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 713.927881] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 714.180546] Bluetooth: hci2: command 0x0401 tx timeout 00:55:45 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = getpgid(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xff, 0x7, 0x80, 0x2, 0x0, 0x3ff, 0x8080, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x14, 0x2, @perf_bp={&(0x7f0000000080)}, 0x10101, 0x8000, 0xffffffff, 0x1, 0x6, 0x7fffffff, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:55:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xf}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:45 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) 00:55:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x49100}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 00:55:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5601}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10000000000000}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x100000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x880) 00:55:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:45 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) 00:55:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x60}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:46 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x200000c4) 00:55:46 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) getpgid(0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:46 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:55:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xf0}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:46 executing program 0: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:46 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:55:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:46 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x3}, 0x8808, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x101, 0x6, "c277545bd78f8fb72e87b1248179b6e2438f7c10e1302401e9a79cb3021f14e4", 0x9, 0x1, 0x4, 0x7f, 0x2}) 00:55:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x600}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:47 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) getpgid(0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xe00}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:47 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) socket$nl_generic(0x10, 0x3, 0x10) 00:55:47 executing program 1: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x25, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x7f, @empty}}, 0x0, 0x0, 0x4f, 0x0, "222feca896b3e8da6a244b931355d7ea195e41c45993992369c8327de66d05572f7e35aeaf7ffc42f604e57b09c74708d1dadc7801a6bea29d69012ea86d09753287d215f18564d96712f5a36e5b0cfd"}, 0xd8) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)="76766250a74affd47ed78aea3d057f52b802e14aaae4585bc452c0f371ea73b00c61559d37470d3fc0af12a68c729df4a7123775448205ba7bfa99fee1f3fe0ee2d23c15e330c7ea78145060b3e6a21b3e9512f2cd11dc16618893c6ff20076e9331d38c8b211df33d788afdb3873805b279") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 716.250471] Bluetooth: hci2: command 0x0401 tx timeout 00:55:47 executing program 1: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:47 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) 00:55:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xf00}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:47 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) getpgid(0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:47 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100)=0xffffff00, 0x4) 00:55:47 executing program 1: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x1caa}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:47 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) getpgid(0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:47 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) 00:55:47 executing program 0: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x123}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x8808, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:47 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:48 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) 00:55:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x6000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:48 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:48 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7ff) 00:55:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:48 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:55:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xaa1c}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:48 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xf000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x8808}, 0x0, 0xf, 0xffffffffffffffff, 0x0) 00:55:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:48 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 00:55:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:55:48 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x34000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x494002, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r3}}, 0x38) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x4, 0x5e70, "06ecb8a34aea1512703694afc3cd61f3ed6959247460cf38b97d16c1f11cd68cfd3577a0afa33e613071c6a2388c7f16cc776e0e84c0a7c7e878f432742b17607db9e1283303b514fe7fcefae651d6d00fc2c859feeb15e3acf5a2af3d5f0d4c4e933377e597ca335ba86a0d9440a0be702f93bd168fab37b79fa314b20f525164bc5bc8e41a65c2688c47633b8eaf6503193ac29012325e9963f7a24f7b9231edda1438db4cb96aaa244c6892fcb4770c86e61ace2053fe81285c75c853d976256aea717a67068e4c1af5691681bdd00d97be0006e8d1eac7ac227ba13c4eacf42a87f6e3d58b1ffeb1bcaef0ed0973b408d84d9be28ca1894d46ddadec0af1", 0x9, 0x3, 0xff, 0x0, 0x7, 0xf8, 0xea, 0x1}, r3}}, 0x128) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, [], 0x1}, 0x6b1}, r3}}, 0x30) 00:55:48 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:55:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:55:49 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) socket$nl_generic(0x10, 0x3, 0x10) 00:55:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:55:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x400300}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:49 executing program 0: sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x44}}, 0x8800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x400}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffe0}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 00:55:49 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) [ 717.814417] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 717.845802] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 718.330242] Bluetooth: hci2: command 0x0401 tx timeout 00:55:49 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:49 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:55:49 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:49 executing program 0: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x42cc01, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x2}}, 0x18) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0xe915, 0x8, 0x4, 0x800, 0x4b, {}, {0x2, 0xc, 0x4, 0x2d, 0x30, 0x9, "d30937e6"}, 0x8, 0x4, @planes=&(0x7f00000002c0)={0x3f, 0x40, @fd, 0x5}, 0x505, 0x0, r0}) 00:55:49 executing program 3: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:55:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:50 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x101, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:50 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:55:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, 0x0}, 0x0) 00:55:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:55:50 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:55:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, 0x0}, 0x0) 00:55:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cachefiles\x00', 0x224500, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000004c0)={0x4, [0xfff, 0x6], 0x401}, 0x10) 00:55:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, 0x0}, 0x0) 00:55:51 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x101, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:51 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:55:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x6000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:51 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 00:55:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={0x0}}, 0x0) 00:55:51 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:51 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x1089, 0x2, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x2, 0xfa, 0x4, 0x7f, "4e98acc9"}, 0x4, 0x2, @offset=0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x1, 0x6, 0x4, 0x7707234a7cb942ea, 0x9, {r1, r2/1000+60000}, {0x3, 0x1, 0x3f, 0x1, 0x40, 0x3, "f9cb7c33"}, 0x800, 0x2, @planes=&(0x7f0000000100)={0x20, 0x12, @mem_offset=0x19, 0x5}, 0x1ef6, 0x0, r3}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x101, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:51 executing program 1: sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x44}}, 0x8800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x400}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffe0}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 00:55:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 720.410135] Bluetooth: hci2: command 0x0401 tx timeout 00:55:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x101, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) [ 720.474137] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:55:52 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:52 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x101000) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000240)={0x1, 0xc, 0x4, 0x100, 0x5, {0x77359400}, {0x1, 0x1, 0x6, 0x7, 0xff, 0x1, "efe49ff5"}, 0x1, 0x3, @fd=r1, 0xffffffff, 0x0, r2}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:semanage_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x20040840) 00:55:52 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x1089, 0x2, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x2, 0xfa, 0x4, 0x7f, "4e98acc9"}, 0x4, 0x2, @offset=0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x1, 0x6, 0x4, 0x7707234a7cb942ea, 0x9, {r1, r2/1000+60000}, {0x3, 0x1, 0x3f, 0x1, 0x40, 0x3, "f9cb7c33"}, 0x800, 0x2, @planes=&(0x7f0000000100)={0x20, 0x12, @mem_offset=0x19, 0x5}, 0x1ef6, 0x0, r3}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:52 executing program 4: perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xe000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:52 executing program 4: perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:52 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xf000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:52 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x1089, 0x2, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x2, 0xfa, 0x4, 0x7f, "4e98acc9"}, 0x4, 0x2, @offset=0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x1, 0x6, 0x4, 0x7707234a7cb942ea, 0x9, {r1, r2/1000+60000}, {0x3, 0x1, 0x3f, 0x1, 0x40, 0x3, "f9cb7c33"}, 0x800, 0x2, @planes=&(0x7f0000000100)={0x20, 0x12, @mem_offset=0x19, 0x5}, 0x1ef6, 0x0, r3}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:52 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) 00:55:52 executing program 4: perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:52 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x1089, 0x2, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x2, 0xfa, 0x4, 0x7f, "4e98acc9"}, 0x4, 0x2, @offset=0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x1, 0x6, 0x4, 0x7707234a7cb942ea, 0x9, {r1, r2/1000+60000}, {0x3, 0x1, 0x3f, 0x1, 0x40, 0x3, "f9cb7c33"}, 0x800, 0x2, @planes=&(0x7f0000000100)={0x20, 0x12, @mem_offset=0x19, 0x5}, 0x1ef6, 0x0, r3}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:53 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x101, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:53 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x20000000000003) 00:55:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x60000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:53 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x1089, 0x2, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x2, 0xfa, 0x4, 0x7f, "4e98acc9"}, 0x4, 0x2, @offset=0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x1, 0x6, 0x4, 0x7707234a7cb942ea, 0x9, {r1, r2/1000+60000}, {0x3, 0x1, 0x3f, 0x1, 0x40, 0x3, "f9cb7c33"}, 0x800, 0x2, @planes=&(0x7f0000000100)={0x20, 0x12, @mem_offset=0x19, 0x5}, 0x1ef6, 0x0, r3}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:53 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x1089, 0x2, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x2, 0xfa, 0x4, 0x7f, "4e98acc9"}, 0x4, 0x2, @offset=0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x1, 0x6, 0x4, 0x7707234a7cb942ea, 0x9, {r1, r2/1000+60000}, {0x3, 0x1, 0x3f, 0x1, 0x40, 0x3, "f9cb7c33"}, 0x800, 0x2, @planes=&(0x7f0000000100)={0x20, 0x12, @mem_offset=0x19, 0x5}, 0x1ef6, 0x0, r3}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:53 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYRES64], 0x58}}, 0x20588c0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x800, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x4004) 00:55:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:53 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x1089, 0x2, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x2, 0xfa, 0x4, 0x7f, "4e98acc9"}, 0x4, 0x2, @offset=0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x1, 0x6, 0x4, 0x7707234a7cb942ea, 0x9, {r1, r2/1000+60000}, {0x3, 0x1, 0x3f, 0x1, 0x40, 0x3, "f9cb7c33"}, 0x800, 0x2, @planes=&(0x7f0000000100)={0x20, 0x12, @mem_offset=0x19, 0x5}, 0x1ef6, 0x0, r3}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) [ 722.335837] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 722.385997] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 722.489983] Bluetooth: hci2: command 0x0401 tx timeout 00:55:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:54 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x1089, 0x2, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x2, 0xfa, 0x4, 0x7f, "4e98acc9"}, 0x4, 0x2, @offset=0x4}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xaa1c0000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:54 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x800) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r2}}, 0x38) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x4, {0x7, 0x4, "d294abf717c84782ec41311d1adc14faf1a7c26b4c8690b1c875e4d6303dfc8e1fb72d6873203f28787d10bccb0ca7702c1932bff95f76908cf0b9ba07c5cb650cdcc40484e8d11745a7501fd7fb0267ee5e63bf765b550ff869070fa65a3c6b3635346f528b35cc4274092f8dfd609d03de2c02b39ff3cfd020dc2ae4170cc0d0fb5e89a49b96679afaec3d9a12cab16b746f5925a90e9fef5d12e74efa52e0a939502c28ae300d672289174777dbafaba7f035892170a1bd8c468ccbec851b57bb88fa62ad1ca7139aaedce3695fd7e1773daa0d465b7163b400946fca517085a7ce8e217be99fd371fae96b7cfc7cb9bc14fd254311a31a0f8a889f5e2863", 0x2, 0x9, 0x20, 0x1, 0x29, 0x23, 0x9}, r2}}, 0x128) 00:55:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:54 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:54 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x2a042, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x6) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xd2, 0xfd, 0x3f, 0x7, 0x0, 0x7, 0x23888, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x7fff}, 0x40100, 0x6, 0x920d, 0x5, 0x1b3c, 0xfff}, 0x0, 0x1, r0, 0x0) 00:55:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:54 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:55 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xfffff000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:55 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40011}, 0x8805) sendmsg$nl_crypto(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getstat={0xe0, 0x15, 0x800, 0x70bd2a, 0x25dfdbff, {{'drbg_pr_hmac_sha256\x00'}, [], [], 0x400}, ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008080}, 0x40003) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5805, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x8a1c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:55 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:55 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:55 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:55 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:55 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x7, 0x0) 00:55:55 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:55 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:55 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:55 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85a04, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x48000, 0xf1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 00:55:55 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:55 executing program 1: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:55 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x1, 0x70, 0x35, 0x4, 0x0, 0x0, 0x0, 0x9b6, 0x1418, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x7, 0xffffffffffff8001}, 0x2, 0xfff, 0x2, 0x8, 0x1f, 0x3, 0x34fe}) 00:55:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:55:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:55 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:55 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:55 executing program 0: ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f0000000100)={0x0, 0x7, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4a10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x8808, 0x0, 0x0, 0x0, 0xd7, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:55:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xffffffff}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 724.570039] Bluetooth: hci2: command 0x0401 tx timeout 00:55:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:55:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x5, @vbi={0x9, 0x6, 0xa8, 0x34565559, [0x3ff, 0x6], [0x7f, 0xf4], 0x13a}}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x7, 0x2}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r0}, 0x8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000280)=0x10) r2 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000300)={0x0, 0x80000000}) 00:55:56 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x101, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:55:56 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x0, 0x6, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:56 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x28, 0x3, 0x8, 0x6, 0x0, 0xf7, 0x20000, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5cc, 0x1, @perf_config_ext={0x100000001, 0xfff}, 0x4000, 0x1ff, 0x3, 0x7, 0x5, 0x5, 0x3ff}, 0xffffffffffffffff, 0xe, r0, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) 00:55:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:56 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x7fff, "b97829", 0x6, 0x3}) 00:55:56 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 00:55:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa828}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:57 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 00:55:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:57 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:57 executing program 0: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x4, 0x7f, 0xe4, 0x7f, 0x2a, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x8e68, 0x1, 0x80000001}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x60, r3, 0x23c, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'erspan0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fedbdf25070000001400080076657468305f766c616e0000000000ebdc49e00008000000000043f969bac03e9b430000080018000000000000080017000000000000000088ae043ecaf3e8abd0142576b8cb509b0dde0e664bce48dcca6ccd755756a46b9e24ff12b3b813ce1e1dfe1d1f78940d671e111e0fe1def55a29527f28013c4d88e8e20bb32418932b889506434e7c4be8000000000000000000", @ANYRES32, @ANYBLOB="0800190000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'sit0\x00', r0, 0x4, 0x0, 0x8, 0x1, 0x10, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x10, 0x6bfe, 0x5}}) 00:55:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x2, 0xffffffffffffffff, 0x8) 00:55:57 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 00:55:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x3}) 00:55:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 00:55:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 726.498233] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:57 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 726.551334] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xe}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:58 executing program 0: sysfs$3(0x3) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 726.649757] Bluetooth: hci2: command 0x0401 tx timeout 00:55:58 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:58 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40011}, 0x8805) sendmsg$nl_crypto(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getstat={0xe0, 0x15, 0x800, 0x70bd2a, 0x25dfdbff, {{'drbg_pr_hmac_sha256\x00'}, [], [], 0x400}, ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008080}, 0x40003) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5805, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x8a1c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x0, 0x3}) 00:55:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xfffff000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:55:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:55:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf0}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:58 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:58 executing program 0: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "ebd6006b7cf96caa", "963b412d98a598001cedb424b8e7578f", "bf9d58ae", "395aea74819afd9f"}, 0x28) 00:55:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x0, 0x3}) 00:55:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) [ 727.529711] Bluetooth: hci0: command 0x0401 tx timeout 00:55:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:58 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x1089, 0x2, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x2, 0xfa, 0x4, 0x7f, "4e98acc9"}, 0x4, 0x2, @offset=0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x1, 0x6, 0x4, 0x7707234a7cb942ea, 0x9, {r1, r2/1000+60000}, {0x3, 0x1, 0x3f, 0x1, 0x40, 0x3, "f9cb7c33"}, 0x800, 0x2, @planes=&(0x7f0000000100)={0x20, 0x12, @mem_offset=0x19, 0x5}, 0x1ef6, 0x0, r3}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:55:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0xc1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYRES64], 0x58}}, 0x20588c0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x800, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x4004) 00:55:59 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)) getuid() 00:55:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x0, 0x3}) 00:55:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x7fff, "b97829", 0x6, 0x3}) 00:55:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xe00}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 727.723414] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:55:59 executing program 0: r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4000000000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x240000d4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x18808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xf000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:55:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf00}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:59 executing program 4: sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x44}}, 0x8800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x400}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffe0}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 00:55:59 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) 00:55:59 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r0}}, 0x18) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:55:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1caa}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:55:59 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) getpgid(0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x2, 0x7fff, "b97829", 0x6, 0x3}) [ 728.006168] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:56:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x3}) 00:56:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:56:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:00 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x4, 0x80, 0x20, 0x24, 0x0, 0x7, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x1200, 0x0, 0x400, 0x0, 0x1, 0x80000000, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x3, 0x70, 0x7, 0x40, 0xd3, 0x3, 0x0, 0x0, 0x28190, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x553, 0x1, @perf_config_ext={0xd3b, 0x3fff}, 0x4, 0x5, 0x8, 0x2, 0x0, 0x6, 0x3f}) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) 00:56:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0xf}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 728.729449] Bluetooth: hci2: command 0x0401 tx timeout 00:56:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xaa1c}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x10) clock_gettime(0x2, &(0x7f0000000400)) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r6 = accept(r2, &(0x7f0000000200)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x80) r7 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r7, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @local}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '/dev/input/mice\x00'}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '/dev/input/mice\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x24048014}, 0x24048815) 00:56:00 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x7, 0x80, 0x8, 0x2, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x40, 0x7f, 0x4, 0x5, 0x5d7, 0x20c}, 0xffffffffffffffff, 0x8, r0, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x1000, 0xc, 0x4, 0x40, 0x6b1, {}, {0x5, 0x1, 0x7, 0x5, 0x0, 0x20, "d38ac262"}, 0x0, 0x3, @userptr=0x10001, 0x6, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x101, 0x2, 0x4, 0x400, 0x7fffffff, {}, {0x3, 0x8, 0x2, 0x9, 0xe2, 0x3f, "bfd8ac2f"}, 0xa2, 0x1, @userptr=0x2e1, 0x2, 0x0, r1}) 00:56:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x6}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}, 0xb212}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) 00:56:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 729.016943] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:00 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80155, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x8200, 0x200, 0x0, 0x1, 0x43e, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1, 0x8, 0x7, 0xff, 0x0, 0x4, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0xa2f8264e5afef226, @perf_config_ext={0x81, 0x1}, 0x2c10, 0x5, 0x7, 0x3, 0x6, 0x20, 0x40}, 0x0, 0xe, r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfe6, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)="d8a9b97c54a777d7c0b7b23ad0b0300f98cf5a354628409b28262a9cc72fcde254bbdc43a8d65cbedb1f9361d9d8519e443a478b2d55919cdabe2608f1b585b4d73905977cf571b5012374b2e34b41ab9754dbd24976fd627f4d6e6d232c31663827f0a7b2d921cdccb313e5b32b3243", 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x7800, 0x4, 0x12d6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x40, 0x7, 0xfffffffa}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, 0x0, 0x300, 0x70bd2b, 0x100, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x3}, 0x4000844) 00:56:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x0, 0x3}) 00:56:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x10) clock_gettime(0x2, &(0x7f0000000400)) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r6 = accept(r2, &(0x7f0000000200)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x80) r7 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r7, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @local}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '/dev/input/mice\x00'}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '/dev/input/mice\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x24048014}, 0x24048815) 00:56:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xaa1c}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x34000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 729.609475] Bluetooth: hci0: command 0x0401 tx timeout 00:56:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:56:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb63) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) [ 729.682418] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400300}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x34000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x10) clock_gettime(0x2, &(0x7f0000000400)) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r6 = accept(r2, &(0x7f0000000200)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x80) r7 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r7, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @local}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '/dev/input/mice\x00'}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '/dev/input/mice\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x24048014}, 0x24048815) 00:56:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x0, 0x3}) 00:56:01 executing program 4: socket(0x0, 0x3, 0x80000001) 00:56:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb63) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 00:56:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:01 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000640)={r0, 0x0, r1, 0x1, 0x80000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x2, 0x4, [0x800, 0x4, 0xcac, 0x4, 0x100, 0xfc3, 0x101, 0x983, 0x2, 0x7fff, 0x81, 0x80000000, 0x81, 0x400, 0x40, 0x4, 0x95, 0x9, 0x3f, 0x8, 0x1ff8, 0x4, 0xda, 0xfc9, 0x3, 0x7, 0x4, 0x7, 0x8, 0x8, 0xb744, 0x1, 0x247, 0x4, 0x0, 0xff, 0x8, 0x80000000, 0x21d3, 0x2, 0x8, 0x7fff, 0x10000, 0x2, 0x9, 0x7, 0xffff0000, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xffffff00, 0x1ff, 0x80000001, 0x0, 0x3f, 0x7, 0x5, 0x8, 0x80, 0xdc59], [0xff, 0x9, 0x5, 0x3, 0x2, 0x800, 0x7, 0x0, 0x0, 0x9, 0x8c02, 0x5, 0x1, 0x8, 0x8, 0x3, 0x2, 0x77bd, 0x9, 0x4, 0xfffffffc, 0x800, 0x3, 0x4, 0xffff, 0x8, 0x4911, 0x0, 0x0, 0x800, 0x8, 0x101, 0x0, 0x7531, 0x7, 0x3, 0x4, 0x2, 0x4, 0xef78, 0x101, 0xde9, 0xff, 0x0, 0xfffffffc, 0x9, 0x4, 0x9, 0x5, 0x6, 0x5, 0x8001, 0x1000, 0x6, 0x5, 0x1, 0x4, 0xbf2, 0x0, 0x9, 0x3f, 0x3c, 0x3a41, 0x9], [0x80000001, 0x7, 0x4, 0x100, 0x59, 0x0, 0xa2c, 0x1, 0x4, 0x1, 0x5, 0xfc29, 0xffffff7f, 0x0, 0x5, 0xfffffff9, 0x1c9, 0x0, 0x1, 0x6, 0x8, 0x0, 0x163f, 0x0, 0x3, 0x9, 0x9, 0x4, 0x7, 0x3, 0x3, 0x0, 0x13, 0x40, 0x80, 0x7fff, 0xbe, 0x40, 0x9, 0x1, 0x5, 0x9, 0xad, 0x7fff, 0x6, 0x1010, 0xe1, 0x8, 0x1f, 0x2, 0x5886, 0x80000000, 0x8, 0x0, 0x2, 0xfffffffe, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x3f, 0x4, 0x5], [0x1, 0x7fff, 0x1f, 0x0, 0x7, 0x7, 0x401, 0x9771, 0xfffffff7, 0xffff, 0x7fffffff, 0x5, 0x52, 0x6, 0x33f, 0x1, 0x10000, 0x7ff, 0x8, 0x84, 0x7fff, 0x7ff, 0xffffffff, 0xf350, 0x0, 0x200, 0x4, 0x2, 0x8001, 0x5, 0x8000, 0x5680000, 0x23800000, 0x40, 0x9, 0x40, 0x2, 0x2, 0x81, 0x4, 0x6, 0x4, 0x400, 0x0, 0x4, 0x7, 0x8, 0x4, 0x40, 0x5, 0x100, 0x4, 0xe1d, 0x5, 0xff, 0x7d, 0xfffffffe, 0x4, 0xffc0000, 0x9, 0xfffffffa, 0x6, 0x20, 0x8], 0x4, ['^+%\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, 0xfffffffffffffffe, 0x4) [ 729.885427] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x0, 0x3}) 00:56:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x10) clock_gettime(0x2, &(0x7f0000000400)) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) accept(r2, &(0x7f0000000200)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x80) r6 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r6, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:56:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb63) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 00:56:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x4080) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd64389ab12ae095e4105c19701f2f3195569ac977e440000c000200000014000500"/53], 0x30}, 0x1, 0x0, 0x0, 0x4089}, 0x4000) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) [ 730.106465] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:01 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r0, 0xdc8815922d17b331, 0x0, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c898}, 0x4000800) 00:56:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x10) clock_gettime(0x2, &(0x7f0000000400)) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) accept(r2, &(0x7f0000000200)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x80) accept(0xffffffffffffffff, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 00:56:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x10) clock_gettime(0x2, &(0x7f0000000400)) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) accept(r2, &(0x7f0000000200)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x80) r6 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r6, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 730.327144] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:01 executing program 1: ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 00:56:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x10) clock_gettime(0x2, &(0x7f0000000400)) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) accept(r2, &(0x7f0000000200)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x80) accept(0xffffffffffffffff, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 730.408836] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:01 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) [ 730.586863] FAULT_INJECTION: forcing a failure. [ 730.586863] name failslab, interval 1, probability 0, space 0, times 0 [ 730.618286] CPU: 1 PID: 8094 Comm: syz-executor.0 Not tainted 4.19.172-syzkaller #0 [ 730.626823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.638714] Call Trace: [ 730.641572] dump_stack+0x1fc/0x2ef [ 730.646481] should_fail.cold+0xa/0xf [ 730.651708] ? setup_fault_attr+0x200/0x200 [ 730.656515] ? mark_held_locks+0xf0/0xf0 [ 730.661055] ? mark_held_locks+0xa6/0xf0 [ 730.667189] __should_failslab+0x115/0x180 [ 730.672337] should_failslab+0x5/0x10 [ 730.676300] kmem_cache_alloc_node+0x54/0x3b0 [ 730.681575] __alloc_skb+0x71/0x560 [ 730.686189] create_monitor_ctrl_open+0x16c/0x670 [ 730.692669] ? hci_sock_setsockopt+0x650/0x650 [ 730.698158] ? security_capable+0x8f/0xc0 [ 730.703724] hci_sock_ioctl+0x62c/0x7d0 [ 730.708450] ? _parse_integer+0x180/0x180 [ 730.713154] ? hci_sock_release+0x590/0x590 [ 730.718926] ? __might_fault+0x192/0x1d0 [ 730.723994] ? _copy_from_user+0xd2/0x130 [ 730.729293] sock_do_ioctl+0xcb/0x2d0 [ 730.734396] ? compat_ifr_data_ioctl+0x150/0x150 [ 730.740044] ? __lock_acquire+0x6de/0x3ff0 [ 730.746081] sock_ioctl+0x2ef/0x5d0 [ 730.751427] ? dlci_ioctl_set+0x30/0x30 [ 730.756008] ? ksys_write+0x241/0x2a0 [ 730.760883] ? dlci_ioctl_set+0x30/0x30 [ 730.765784] do_vfs_ioctl+0xcdb/0x12e0 [ 730.770298] ? lock_downgrade+0x720/0x720 [ 730.775273] ? check_preemption_disabled+0x41/0x280 [ 730.782148] ? ioctl_preallocate+0x200/0x200 [ 730.786845] ? __fget+0x356/0x510 [ 730.791611] ? do_dup2+0x450/0x450 [ 730.796333] ? vfs_write+0x393/0x540 [ 730.800969] ? fput+0x2b/0x190 [ 730.804914] ksys_ioctl+0x9b/0xc0 [ 730.809223] __x64_sys_ioctl+0x6f/0xb0 [ 730.809336] Bluetooth: hci2: command 0x0401 tx timeout [ 730.813633] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 730.813663] do_syscall_64+0xf9/0x620 [ 730.813682] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 730.835127] RIP: 0033:0x465b09 [ 730.839139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 730.860074] RSP: 002b:00007fce69c4b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.869402] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 730.877565] RDX: 0000000020000240 RSI: 00000000800448f0 RDI: 0000000000000004 [ 730.886880] RBP: 00007fce69c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 730.895145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.903522] R13: 00007fffdcb725ff R14: 00007fce69c4b300 R15: 0000000000022000 00:56:02 executing program 4 (fault-call:0 fault-nth:0): perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x10) clock_gettime(0x2, &(0x7f0000000400)) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) accept(r2, &(0x7f0000000200)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x80) accept(0xffffffffffffffff, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:02 executing program 1: ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 00:56:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:02 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:02 executing program 1: ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 00:56:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 731.202077] FAULT_INJECTION: forcing a failure. [ 731.202077] name failslab, interval 1, probability 0, space 0, times 0 [ 731.230183] CPU: 1 PID: 8125 Comm: syz-executor.3 Not tainted 4.19.172-syzkaller #0 [ 731.240013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 731.249845] Call Trace: [ 731.253106] dump_stack+0x1fc/0x2ef [ 731.257307] should_fail.cold+0xa/0xf [ 731.261484] ? setup_fault_attr+0x200/0x200 [ 731.265945] ? mark_held_locks+0xf0/0xf0 [ 731.270405] ? mark_held_locks+0xa6/0xf0 [ 731.275752] __should_failslab+0x115/0x180 [ 731.280281] should_failslab+0x5/0x10 [ 731.284442] kmem_cache_alloc_node+0x54/0x3b0 [ 731.289316] __alloc_skb+0x71/0x560 [ 731.293336] create_monitor_ctrl_open+0x16c/0x670 [ 731.298387] ? hci_sock_setsockopt+0x650/0x650 [ 731.303116] ? security_capable+0x8f/0xc0 [ 731.307383] hci_sock_ioctl+0x62c/0x7d0 [ 731.311476] ? _parse_integer+0x180/0x180 [ 731.316350] ? hci_sock_release+0x590/0x590 [ 731.320903] ? __might_fault+0x192/0x1d0 [ 731.325943] ? _copy_from_user+0xd2/0x130 [ 731.330783] sock_do_ioctl+0xcb/0x2d0 [ 731.334907] ? compat_ifr_data_ioctl+0x150/0x150 [ 731.340993] ? __lock_acquire+0x6de/0x3ff0 [ 731.345883] sock_ioctl+0x2ef/0x5d0 [ 731.350541] ? dlci_ioctl_set+0x30/0x30 [ 731.355008] ? ksys_write+0x241/0x2a0 [ 731.359106] ? dlci_ioctl_set+0x30/0x30 [ 731.363873] do_vfs_ioctl+0xcdb/0x12e0 [ 731.368058] ? lock_downgrade+0x720/0x720 [ 731.372750] ? check_preemption_disabled+0x41/0x280 [ 731.378404] ? ioctl_preallocate+0x200/0x200 [ 731.383146] ? __fget+0x356/0x510 [ 731.387080] ? do_dup2+0x450/0x450 [ 731.391084] ? vfs_write+0x393/0x540 [ 731.395176] ? fput+0x2b/0x190 [ 731.399130] ksys_ioctl+0x9b/0xc0 00:56:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x10) clock_gettime(0x2, &(0x7f0000000400)) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r6 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r6, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x10) clock_gettime(0x2, &(0x7f0000000400)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r6, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) [ 731.402953] __x64_sys_ioctl+0x6f/0xb0 [ 731.407540] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 731.413447] do_syscall_64+0xf9/0x620 [ 731.418065] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 731.423973] RIP: 0033:0x465b09 [ 731.427267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:56:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r6, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) [ 731.447954] RSP: 002b:00007f02b32c0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.457050] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 731.466004] RDX: 0000000020000240 RSI: 00000000800448f0 RDI: 0000000000000004 [ 731.474132] RBP: 00007f02b32c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 731.481925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.490797] R13: 00007fff49ffee8f R14: 00007f02b32c0300 R15: 0000000000022000 00:56:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:02 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 00:56:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xe000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 731.550486] nla_parse: 4 callbacks suppressed [ 731.550498] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r6, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:03 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x20000070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 731.689463] Bluetooth: hci0: command 0x0401 tx timeout [ 731.702601] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 00:56:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') r4 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r4, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:03 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0c4300f0db1240d0fc245e5d05084c005b016b2372e12c853977b0665fe52055f564df2601d47f36c30073ab5be21e2651724156709bd7c87ce4c0a984faee4de7e40a8ded30fb4a5ed9bb10381732e2235646bc80092ac5585167fce7078013db854fc591a07a953bf0cf1b5eb207e4e69f1b4df2a1aa2f955c55c0199a151b032f4474c1000000e086c5c7aa53560527c9c2d6023d1a531fa02e6b1937b4bd8a4528087aadda193e3f1928450db8c7d87eaadd0ce782d4c02ef701586ec78ff2cd8b381203444d874bfc7ae3991a72903685df1130333f123fce2fe053b10f5d11e111e401436e7cc79b", @ANYRES16=0x0, @ANYBLOB="000002000000ffdbdf25050000000800030005000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000004) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) r4 = socket(0x9, 0x3, 0xa30) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000540)=0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00'}, 0x10) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/mice\x00', 0xa2200) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r7, r8, 0x11}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYRESHEX=r8, @ANYRES32, @ANYBLOB="08000100c431fa44b335c5423d4e76767359df67dc31eb5b0444075b56ba058539006607bb8e39a6252fd0ed7fad5c828153c6bebac34939eab0d98d817e9870efdf628105c862f897c9", @ANYRES32=r3, @ANYRESOCT, @ANYRES32, @ANYBLOB="08000100", @ANYRES16=r9, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800d40100", @ANYRES32=r5, @ANYBLOB="f4a69db6f05da5cbd37ba28da7f05f113ec9b3ffa493745bed58c1db95045635a8f2a4b732b6d0b66cceff6589b02d425d836cbd2bbbe178a9e1c8dd0595e9b1b1aec9e273e193fd7c66c906b8c43d979492d11f17ba9b4ef260ca9b5d0c5336ea941ad9d2fe", @ANYRES32=r1, @ANYBLOB="0ece9fec", @ANYRES32, @ANYBLOB="08000100", @ANYRES16=r0, @ANYBLOB="0c00050026000000000000000c00080005000000000000000c0006000300000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f00000008c0)="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", &(0x7f00000003c0)=@udp, 0x1}, 0x20) openat$mice(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/input/mice\x00', 0x200) 00:56:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r4, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 00:56:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:04 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x1) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:56:04 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) [ 732.889162] Bluetooth: hci2: command 0x0401 tx timeout 00:56:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5450, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:04 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={0x0, 0xcad2, 0x5}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/249, 0xf9}], 0x1, &(0x7f0000000440)=""/4096, 0x1000}, 0x2003) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000001500)={'syztnl1\x00', &(0x7f0000001480)={'ip6gre0\x00', r1, 0x2f, 0xd7, 0x6, 0x1f, 0x21, @dev={0xfe, 0x80, [], 0x41}, @private1={0xfc, 0x1, [], 0x1}, 0x10, 0x20, 0x62c, 0x6}}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x9effffff}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') r4 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r4, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:04 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 00:56:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5451, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r4, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xaa1c0000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:04 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 00:56:04 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x7, 0x7f, 0x5, 0x0, 0x0, 0x77c, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7ff, 0x4, @perf_config_ext={0x1, 0xf97a}, 0x1450, 0x9, 0x3, 0x0, 0x7, 0x8a241b47, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000000c0)={0x1f, [0x40, 0x7]}, 0x10) 00:56:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r3, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x1) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:56:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5450, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:05 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) timerfd_gettime(r1, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x3f) [ 733.769280] Bluetooth: hci0: command 0x0401 tx timeout 00:56:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0x2, 0x4, 0x70000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x20, 0x9, 0x4, 0x8, "b3f4b252"}, 0x4, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x60000, @userptr=0x6, 0x6}, 0x9, 0x0, r2}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r3, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x1) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:56:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5460, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xfffff000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:05 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5451, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x1) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:56:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r1, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8901, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:05 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x8680a37dac8b3012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x1) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) 00:56:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8902, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) 00:56:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5460, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:05 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0xff, 0x1, 0xffffffe0, 0x0, @private0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8, 0x8000, 0x1, 0x3}}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8903, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) 00:56:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8901, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:05 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x1000, 0x401, 0x4, 0x9, 0x0, 0x401, 0x4, 0xad, 0x9, 0x1, 0x1000, 0x598e, 0x1, 0x8, 0x2, 0x40, 0x9, 0x5, 0x3f, 0x2b, 0x7, 0x0, 0x3f, 0x40000000, 0x0, 0x81, 0x4, 0x6, 0x40, 0x9, 0x1, 0x2]}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x802c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000180)={0x0, 0x82, 0x4, [], &(0x7f0000000140)=0x3}) syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2) 00:56:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8904, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) 00:56:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8902, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xffffffff}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8940, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xb110, 0x2, 0x1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x3f, 0x5, 0x9, 0x81, 0x0, 0xc73, 0x10, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0xffffffffffffffd5, 0x7}, 0x4200b, 0x68fc, 0x5a1, 0x6, 0x4, 0x8, 0x100}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x0, r0, 0x6}) 00:56:06 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8903, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0x8, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:06 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) 00:56:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8941, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x206c}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/98, 0x62, 0x7) 00:56:06 executing program 5: socket$can_bcm(0x1d, 0x2, 0x2) accept(0xffffffffffffffff, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8904, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xb, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:06 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) [ 734.976657] Bluetooth: hci2: command 0x0401 tx timeout 00:56:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8940, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7f, 0xe7b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528a, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x420fd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) 00:56:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x894c, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:06 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) 00:56:06 executing program 5: socket$can_bcm(0x1d, 0x2, 0x2) accept(0xffffffffffffffff, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0x25, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8941, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x1, 0x8, 0x0, 0x20, 0x0, 0x8, 0x14200, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x4, 0x80000001, 0xf26b, 0x2, 0x8, 0x28d5, 0x8001}, r0, 0x5, r1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x3ff, [0x1ff, 0x401], 0x9}, 0x10) 00:56:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) 00:56:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8980, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:06 executing program 5: socket$can_bcm(0x1d, 0x2, 0x2) accept(0xffffffffffffffff, &(0x7f0000000480)=@caif=@rfm, &(0x7f0000000500)=0x80) 00:56:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0x200002cc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x894c, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:06 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) 00:56:06 executing program 4: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, r0, 0x0, r1, 0x0) 00:56:06 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, 0x0, &(0x7f0000000500)) 00:56:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8981, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:06 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) 00:56:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8980, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xf, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:06 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000080)=@rc={0x1f, @none}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/196, 0xc4}, {&(0x7f0000000200)=""/186, 0xba}], 0x2}, 0x40002120) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8982, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) 00:56:07 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, 0x0, 0x0) 00:56:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8981, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xc0, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:07 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4ba, 0x3c040) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0xf8, 0x1, 0x4, 0x21, 0x4, {r1, r2/1000+10000}, {0x0, 0xc, 0x8, 0x9, 0x1, 0x7, "be237546"}, 0x8, 0x4, @fd=r3, 0x8}) r4 = accept(r3, 0x0, &(0x7f0000000180)) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @fixed={[], 0x11}, 0x36}, 0xa) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8983, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8982, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 00:56:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xec0, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xc0, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 735.849251] Bluetooth: hci0: command 0x0401 tx timeout 00:56:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x6c, 0x10, 0x0, 0x10000000, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 00:56:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 00:56:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8983, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xc0, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x33fe0, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 00:56:07 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000852f, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000000, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x0) 00:56:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xc0, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 4: clock_getres(0x3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0x6, &(0x7f00000000c0)) 00:56:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x7ffff, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{}, "473f82c34c27a05a", "cd84644a85069037bc362ec93ba16797", "dce7970d", "9e00"}, 0x28) 00:56:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xc0, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20000314, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4b04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x3f, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:07 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xc0, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x58}}, 0x44800) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x80, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20050) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="000229ffff00fbdbdf251103002001000000000000000000000000000014000600677265746170300000000000000000002b00070073797374656d5f753a6f626a6563745ff23a588961375c9db1b95bdc6d6672616d656275665f646576e9f71bf6913a7330000008000500ffffffff2600070073797374656d5f753a6f626a6563745f723a637261636b5f657865635f743a733000000008000400ac1414bb0500e3ff000000000000"], 0xb0}}, 0x40000) pipe(&(0x7f0000000700)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25020008708441129ded2f7374656d5f753a6f626a6563745f723a6b6d73675f6465766963655f743a733000002000070073797374656d5f753a6f626a6563745f723a70746d785f743a73300014000200fc0000000000000000000000000000012700070073797374656d5f753a6f626a6563745f723a64686370635f73746174655f743a733000001400060069703665727370616e300000000000000500010001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000011) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000340)={0x0, 0x0, r2, 0x8c000000}) r6 = socket(0x29, 0x2, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x94, r5, 0x302, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x15}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @private=0xa010101}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @broadcast}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_runtime_t:s0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x6c180}, 0x100) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a80)={0xb4, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2404c014}, 0x4004055) 00:56:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x7ffff000, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xfffffdef, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:08 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xc0, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x5) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0164202108030001000500070003007f0081000800018001000500fc060100030009000100cac646f18c5c37786796abc7e7022db5cffb1c64256bd8713e0728679129c162b3117669668824e706e4c1a5d0785730e4c5604560dd759bdaa5980fade0c0e520ba888f5071091297bf3428b47e456e9625c1c2e303ff76b87ca5000000000000000000"], 0x25) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r1, 0x12) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000300)={0x20, [0x901, 0x9], 0x7ff}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x30, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0)=r1, 0x12) 00:56:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:08 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x89a1, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) [ 736.947015] can: request_module (can-proto-5) failed. 00:56:08 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xc0, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 736.987271] can: request_module (can-proto-5) failed. 00:56:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:08 executing program 4: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x8, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xfff}, 0x206c, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x2}, 0x14}}, 0x0) 00:56:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) [ 737.049364] Bluetooth: hci2: command 0x0401 tx timeout 00:56:08 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x89a1, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xc0, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r1}}, 0x38) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {r1, 0x9, "dd932c", "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"}}, 0x110) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x4}, 0x14}}, 0x0) 00:56:08 executing program 4: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:08 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x89a1, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xc0, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x6}, 0x14}}, 0x0) [ 737.928959] Bluetooth: hci0: command 0x0401 tx timeout 00:56:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x87, 0x5d, 0x8, 0xff, 0x0, 0x0, 0x20020, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x8000, 0x29, 0x1, 0x4, 0x0, 0x2, 0x1}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) 00:56:09 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x89a1, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xc0, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x8}, 0x14}}, 0x0) 00:56:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40049409, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) 00:56:09 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x89a1, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:56:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40049409, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4020940d, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xe}, 0x14}}, 0x0) 00:56:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4020940d, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:56:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x5, 0x40, 0x0, 0x3, 0x0, 0x1, 0x4, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0xc854, 0xdfc}, 0x0, 0x2, 0x3a364ebb, 0x4, 0x3, 0x4, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x1b) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x59, 0x5, 0x6, 0x2, 0x0, 0x80000001, 0x48000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x2452, 0x8, 0x2, 0x6, 0x7, 0x80000000, 0x1}) 00:56:09 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x89a1, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xf}, 0x14}}, 0x0) 00:56:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:56:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d3, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:09 executing program 4: ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000000c0)={0x0, 0xa0, 0x80, [], &(0x7f0000000080)=0x1f}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, 0x0) 00:56:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x60}, 0x14}}, 0x0) 00:56:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d3, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, 0x0) 00:56:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xff, @local, 0x3}}}, 0x30) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x3, 0x81, 0x20, 0x1, 0x0, 0xbda6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2400, 0x1, @perf_config_ext={0x8, 0x100000000}, 0x51804, 0x929, 0x200, 0x9, 0x4, 0xc00000, 0x400}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x8) 00:56:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xf0}, 0x14}}, 0x0) 00:56:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, 0x0) 00:56:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x10, 0x70bd28, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x80) 00:56:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x600}, 0x14}}, 0x0) 00:56:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000240)={0x0, 0x0, "b97829"}) 00:56:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x206c, 0xffffffffffffff73, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 00:56:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) 00:56:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xe00}, 0x14}}, 0x0) [ 739.128795] Bluetooth: hci2: command 0x0401 tx timeout 00:56:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x3, 0x20040) 00:56:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) 00:56:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xf00}, 0x14}}, 0x0) 00:56:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0189436, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x610000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)={0x1, [0x0]}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x1, 0x100, 0x30, @private2, @private2, 0x7800, 0x80, 0x3, 0x9}}) 00:56:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0189436, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) 00:56:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x1caa}, 0x14}}, 0x0) 00:56:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000", @ANYRES16=r0, @ANYBLOB="040025bd7000fedbdf2506000000600001801400040000000000000000000000000000000001060001000200000014000400ff02000000000000000000000000000114000400fc000000000000000000000000000001050002007f0000000400000001000000060005004e21000008000200050000000800020002000000"], 0x84}, 0x1, 0x0, 0x0, 0x440c1}, 0x20000000) 00:56:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 00:56:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x6000}, 0x14}}, 0x0) 00:56:11 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x410000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x1000, 0x9, 0x7, 0x3f, 0x90}, 0x14) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000001}, 0x41) 00:56:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 00:56:11 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:11 executing program 4: write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x41, "900bbb", "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"}}, 0x110) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000001c0)={0x1, 0x7, 0x0}) 00:56:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xaa1c}, 0x14}}, 0x0) 00:56:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 00:56:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xc0}, 0x14}}, 0x0) [ 740.013003] Bluetooth: hci0: command 0x0401 tx timeout 00:56:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xf000}, 0x14}}, 0x0) 00:56:11 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x2, 0x0, "b97829", 0x6}) 00:56:11 executing program 4: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1d}, 0x3064, 0x0, 0x0, 0x7}, 0x0, 0x1000000000, 0xffffffffffffffff, 0x8) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000004c0)={0x0, 0x8, '5-\\', 0x8f}) r2 = getpgid(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000180)={0x5, 0x70, 0xfe, 0x9, 0x0, 0x4, 0x0, 0xffffffff, 0x100, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x4}, 0x40486, 0x8001, 0x1, 0x2, 0x43, 0x3, 0x1}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044091}, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x1, 0x9, 0x6, 0x82, 0x0, 0x8000000, 0x8040, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x83, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x8000, 0x9, 0x3, 0x7, 0x1, 0xe4, 0xfc08}, r2, 0xa, 0xffffffffffffffff, 0x2) 00:56:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x2, 0x0, "b97829", 0x6}) 00:56:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000", @ANYRES16=r0, @ANYBLOB="040025bd7000fedbdf2506000000600001801400040000000000000000000000000000000001060001000200000014000400ff02000000000000000000000000000114000400fc000000000000000000000000000001050002007f0000000400000001000000060005004e21000008000200050000000800020002000000"], 0x84}, 0x1, 0x0, 0x0, 0x440c1}, 0x20000000) 00:56:12 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x34000}, 0x14}}, 0x0) 00:56:12 executing program 4: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:12 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:12 executing program 4: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x38000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40101}, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:12 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x610000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)={0x1, [0x0]}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x1, 0x100, 0x30, @private2, @private2, 0x7800, 0x80, 0x3, 0x9}}) 00:56:12 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x386c}, 0x0, 0x0, 0xffffffffffffffff, 0x10) 00:56:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x400300}, 0x14}}, 0x0) [ 741.208574] Bluetooth: hci2: command 0x0401 tx timeout 00:56:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x3, 0x0, "b97829", 0x6}) 00:56:12 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x3, 0x0, "b97829", 0x6}) 00:56:13 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x610000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)={0x1, [0x0]}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x1, 0x100, 0x30, @private2, @private2, 0x7800, 0x80, 0x3, 0x9}}) 00:56:13 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x2e, 0x8, 0x1, 0x7, 0x0, 0x26, 0x8010, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x200, 0x800, 0xc397, 0x8, 0xffff, 0x7}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x5, 0x70, 0x9, 0x4, 0x5, 0x4, 0x0, 0x4, 0x201, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x10, 0x0, 0x2, 0x7, 0x7, 0x1}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 00:56:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xf0ffff}, 0x14}}, 0x0) 00:56:13 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) 00:56:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x1000000}, 0x14}}, 0x0) 00:56:13 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={r1, 0x100000000, 0x101}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f00000000c0)=r1) 00:56:13 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x610000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)={0x1, [0x0]}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x1, 0x100, 0x30, @private2, @private2, 0x7800, 0x80, 0x3, 0x9}}) 00:56:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) [ 742.088896] Bluetooth: hci0: command 0x0401 tx timeout 00:56:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x4, 0x0, "b97829", 0x6}) 00:56:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x2000000}, 0x14}}, 0x0) 00:56:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x4, 0x0, "b97829", 0x6}) 00:56:13 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3f) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x1, 0x70, 0x6, 0x3, 0x4, 0x0, 0x0, 0x200, 0x90b01, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x4002, 0x7, 0x80000000, 0x6, 0x1, 0x0, 0x8000}) 00:56:13 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x610000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)={0x1, [0x0]}) 00:56:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) 00:56:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x4000000}, 0x14}}, 0x0) 00:56:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000240)={0x0, 0x0, "b97829"}) 00:56:14 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x3d, 0x2, 0x5, 0x7f, 0x0, 0x3, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xbe5, 0x3, @perf_bp={&(0x7f0000000080), 0x8}, 0x2000, 0x1, 0x0, 0x4, 0xbff, 0xf43bea9, 0x3}, 0x0, 0x9, r0, 0x0) 00:56:14 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x610000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) 00:56:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x6000000}, 0x14}}, 0x0) 00:56:14 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x220240) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="242b03ecec4f5801c81829c0be107ae0b1b4356bb1bb3b1a5c9e48d00ec1857e3e8fd3e44d1d173d41ab06471dd524a29d2e411f464a8c47a28f2a3e3003bdcad9cb457915ec0bdbe2d7744b4b2f"], 0x5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:14 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x610000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)={0x1, [0x0]}) 00:56:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x5, 0x0, "b97829", 0x6}) [ 743.288649] Bluetooth: hci2: command 0x0401 tx timeout 00:56:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x5, 0x0, "b97829", 0x6}) 00:56:14 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x480) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x10000, "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", 0x2c, 0x1, 0x9, 0x5d, 0x2, 0x1, 0xe5}, r2}}, 0x128) r3 = getpgid(0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000380)={0x4, @vbi={0x3f, 0x5, 0x9, 0x4745504a, [0x401, 0x2], [0x0, 0x7f], 0x1}}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2047}, 0x230}, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, r3, 0x3, 0xffffffffffffffff, 0x0) 00:56:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x8000000}, 0x14}}, 0x0) 00:56:14 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x610000) 00:56:14 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x610000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)={0x1, [0x0]}) 00:56:14 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x610000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)={0x1, [0x0]}) 00:56:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xe000000}, 0x14}}, 0x0) [ 743.608924] Bluetooth: hci3: command 0x0401 tx timeout 00:56:15 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x610000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) 00:56:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 00:56:15 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) 00:56:15 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) 00:56:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x7, 0x0, "b97829", 0x6}) [ 744.168555] Bluetooth: hci0: command 0x0401 tx timeout 00:56:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x7, 0x0, "b97829", 0x6}) 00:56:15 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x610000) 00:56:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x2, 0x0, 0x1, 0x8}, {0x5, 0x1, 0x1, 0xffff0001}, {0x9, 0x3f, 0x53, 0x2}, {0xffdc, 0x4, 0x3, 0x2}, {0xc7, 0x1, 0x1c, 0xffff}]}) 00:56:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xf000000}, 0x14}}, 0x0) 00:56:15 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 00:56:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x8, 0x0, "b97829", 0x6}) [ 744.494977] Bluetooth: hci4: command 0x0401 tx timeout 00:56:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x8, 0x0, "b97829", 0x6}) 00:56:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x60000000}, 0x14}}, 0x0) 00:56:15 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) 00:56:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:15 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 00:56:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x300, 0x0, "b97829", 0x6}) 00:56:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x300, 0x0, "b97829", 0x6}) 00:56:16 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x9effffff}, 0x14}}, 0x0) 00:56:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xb, 0xa, 0x10000) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008080}, 0x24000144) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, 0x0, 0xef0926881e7cda98, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @loopback}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24040081}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdc01, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000041}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x3, 0x0, {0xa, 0x4e23, 0x1, @private1, 0x7}}}, 0x3a) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:16 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "ed675d", 0x80, 0x20}) 00:56:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x500, 0x0, "b97829", 0x6}) 00:56:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x500, 0x0, "b97829", 0x6}) 00:56:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xaa1c0000}, 0x14}}, 0x0) 00:56:16 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 00:56:16 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1f7a16000000008ad0224e63a63171a76cd88f7b7aadd6160d4bbcbd7539cf3d41a4f7646e47", @ANYRES16=r1, @ANYBLOB="020027bd7000fddbdf250400000014000300fe88000000000000000000000000000105000100010000001400060077673100000000000000000000000000050001000100000014000200fe8000000000000000000000000000aa14000300ff010000000000000000000000000001"], 0x74}, 0x1, 0x0, 0x0, 0x2000}, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3e8, 0x20, 0x70bd2b, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0xc001) 00:56:16 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x700, 0x0, "b97829", 0x6}) 00:56:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x700, 0x0, "b97829", 0x6}) 00:56:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xf0ffffff}, 0x14}}, 0x0) 00:56:16 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 00:56:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:16 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:16 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x477800000000) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40098}, 0x80) 00:56:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xfffff000}, 0x14}}, 0x0) 00:56:16 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:16 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xffffff7f}, 0x14}}, 0x0) 00:56:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) pipe(&(0x7f0000000080)) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x48001, 0x0) pipe(&(0x7f0000000100)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x10001, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7) 00:56:16 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:16 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) [ 745.368364] Bluetooth: hci5: command 0x0401 tx timeout [ 745.374560] Bluetooth: hci2: command 0x0401 tx timeout [ 745.688553] Bluetooth: hci3: command 0x0401 tx timeout 00:56:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x2, "b97829", 0x6}) 00:56:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 00:56:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x2, "b97829", 0x6}) 00:56:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xffffff9e}, 0x14}}, 0x0) 00:56:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:17 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:17 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x9, 0x2, 0xfa, 0xee, 0x0, 0x800, 0x10000, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9fd, 0x73}, 0x0, 0x5, 0x0, 0x9, 0x7f, 0x3ff, 0x1}, 0x0, 0x8, r0, 0xa) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000280)={0x4, 0x70, 0x7, 0x8, 0x7f, 0x8, 0x0, 0x60d9, 0x80914, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x1c09, 0x7f, 0xff, 0x5, 0x5, 0xffffffff, 0x2}) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r3, @ANYBLOB="01480aa63000fbdbf72508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 00:56:17 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xfffffff0}, 0x14}}, 0x0) 00:56:17 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100, 0xa5b44, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x206c, 0x0, 0x0, 0x0, 0x1000000000000000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x3f, 0x80, 0x7, 0x3, 0x0, 0x2c7, 0x2000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x40000, 0x7, 0x5, 0x1, 0x400, 0x10001, 0x7}, r0, 0xb, r1, 0x1) [ 746.248338] Bluetooth: hci0: command 0x0401 tx timeout [ 746.568314] Bluetooth: hci4: command 0x0401 tx timeout 00:56:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x3, "b97829", 0x6}) 00:56:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0xffffffff}, 0x14}}, 0x0) 00:56:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x3, "b97829", 0x6}) 00:56:18 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:18 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:18 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x10400) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000240)={0x2, 0x70, 0x9, 0x3, 0x0, 0x81, 0x0, 0x1ff, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x8000, 0x10000, 0x1, 0x6, 0xfff, 0xfff, 0x1000}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x5, 0x70, 0x2, 0x3, 0xf6, 0x3, 0x0, 0x6, 0x11, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x400, 0x1f}, 0x10008, 0xffffffffffffff01, 0x10ce, 0x2, 0x81, 0x3, 0x234}) 00:56:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:18 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:18 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x4) 00:56:18 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:18 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) pipe(&(0x7f0000000180)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080)="ab2ac93a", &(0x7f00000000c0)=@tcp6=r1}, 0x20) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x24a00, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa5b44, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x2}, 0x14}}, 0x0) [ 747.448336] Bluetooth: hci2: command 0x0401 tx timeout [ 747.454120] Bluetooth: hci5: command 0x0401 tx timeout 00:56:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x4, "b97829", 0x6}) 00:56:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 00:56:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x400}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) 00:56:19 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 00:56:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x4, "b97829", 0x6}) 00:56:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x4}, 0x14}}, 0x0) 00:56:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 00:56:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 00:56:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x6}, 0x14}}, 0x0) 00:56:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10400, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000480)="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", 0x1cb) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x81, 0x1, 0x8, 0x81, 0x0, 0x10000, 0x9104, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8a, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x1a0, 0x7f, 0x7fff, 0x5, 0x20, 0xa, 0x9}, r1, 0x10, r2, 0x3) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) 00:56:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x8}, 0x14}}, 0x0) [ 748.328224] Bluetooth: hci0: command 0x0401 tx timeout 00:56:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x5, "b97829", 0x6}) 00:56:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 00:56:19 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x1000, 0xc, 0x4, 0xe000, 0x5, {}, {0x2, 0xc, 0x20, 0x2, 0x3f, 0xb5, "7513b776"}, 0x2, 0x2, @planes=&(0x7f00000000c0)={0x6, 0xf2, @userptr=0x1, 0x2}, 0x7a0d, 0x0, r0}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0xc5, 0x200, 0x9, 0xfffffff9, 0x3f, 0x5, 0x7, 0xff, 0x3, 0x800, 0xc31a, 0xfffffffa, 0x3, 0x4ae0, 0x9, 0x8, 0x1f, 0x0, 0x1f, 0x1, 0x1, 0x1, 0x80000001, 0x8000, 0x1000, 0x1, 0x7, 0x3, 0xfffff016, 0xffff, 0x3f, 0x3]}) syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x27, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x206c, 0x4, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x5, "b97829", 0x6}) 00:56:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xe}, 0x14}}, 0x0) 00:56:19 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x12, 0xff, 0xd2, 0x0, 0x0, 0x101, 0x10000, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x295f, 0x202f}, 0x4000, 0x7fffffff, 0x9, 0x8, 0x7f, 0x6, 0x6}, 0xffffffffffffffff, 0x3, r0, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000d80b286b5651da62695cdf4960d49cc09b8a40dfa835f6d28797309e7ced0eda613f97178646ea1776a5a2244bd67849379050c0747a101abe1b2e455f476648eb928f7d62695ab584b8e97539a1b8daa8f20c24a8a8da9b406035bec01340ee03f9bb606adea4d2ae30d0c49864a2512aba5049783ed94eaf4db19c634cdb4a103855fa8b74f6114ec9ce036df3e5879dcd", @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf2502000000050013007f00000005001400de00000006000300ff000000060001000f00000005001200da00000006001d000200000005000d000100000006001b004e21000008000b0004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x891) 00:56:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 00:56:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r3}}, 0x38) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r3, 0x1, "1f9f7d", "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"}}, 0x110) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) 00:56:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x10001, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x7, "b97829", 0x6}) 00:56:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xf}, 0x14}}, 0x0) 00:56:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/97, 0x61, 0x2) 00:56:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x7, "b97829", 0x6}) 00:56:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2, 0x4ec249c2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x60}, 0x14}}, 0x0) 00:56:20 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @mcast2, 0x120}, r2}}, 0x38) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x339101, 0x0) [ 749.538008] Bluetooth: hci2: command 0x0401 tx timeout 00:56:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x3a, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xf0}, 0x14}}, 0x0) 00:56:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:21 executing program 4: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/209) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa5944, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x200}, 0x206c}, 0x0, 0xc, 0xffffffffffffffff, 0x0) mlockall(0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2c, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x1, {0xa, 0x4e24, 0x9, @empty, 0x10000}, r2}}, 0x38) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000043c8b2464d9859a9249955d02c9fac4ed59d4dd4f325c9fdad03fe3881b5f78f9d7b959225e2b63c69301a482ea8cb83817fd97ad0354e506af3ff594a98a5b0d6808ed1814f34e63953edb2af6ef83512a6111581655ad8e2093bd8452d33a03395101bab7ea82d096899e479e344e4789e685c87df63fdcb2de9987a98388e816b4bc8ebe8fade36bde7ed32853775bc72ad02a6e538aeb6f24e5924b7cf9cf17e38c6f27236bcfbed", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf250400000014000500ff01000000000000000000000000000114000500ff02000000000000000000000000000108000700e0000002"], 0x44}, 0x1, 0x0, 0x0, 0x414}, 0x4000000) 00:56:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x8, "b97829", 0x6}) 00:56:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x60}, 0x14}}, 0x0) 00:56:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x8, "b97829", 0x6}) 00:56:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x600}, 0x14}}, 0x0) 00:56:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) [ 750.411610] Bluetooth: hci0: command 0x0401 tx timeout 00:56:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xe00}, 0x14}}, 0x0) 00:56:21 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}}, 0x90) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 00:56:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xf00}, 0x14}}, 0x0) 00:56:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x300, "b97829", 0x6}) 00:56:22 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200010, 0x0, @perf_bp={0x0}, 0x206c, 0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:56:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x300, "b97829", 0x6}) 00:56:22 executing program 5: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x1caa}, 0x14}}, 0x0) 00:56:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0xd18fd381cb5c67ce, 0x6}}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x20000}, 0x0, 0x0, 0xc35b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x6000}, 0x14}}, 0x0) 00:56:22 executing program 5: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:22 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000240)={0x0, 0x9, 0xff, [], &(0x7f0000000200)=0x6}) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x206c, 0x0, 0xffffffff, 0x0, 0x0, 0x2}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x9) syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x7) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0)=""/248, &(0x7f00000000c0)=0xf8) 00:56:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xaa1c}, 0x14}}, 0x0) 00:56:22 executing program 5: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:22 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="00900100", @ANYRES16=r3, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xd9}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x70, 0x7, 0x0, 0x0, 0x8, 0x0, 0x8000, 0x40000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x84, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x6}, 0x100, 0x1000, 0x3f, 0x1, 0x20, 0xfffff7ce, 0x7eb}) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2) [ 751.607849] Bluetooth: hci2: command 0x0401 tx timeout 00:56:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x500, "b97829", 0x6}) 00:56:23 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x500, "b97829", 0x6}) 00:56:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xf000}, 0x14}}, 0x0) 00:56:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x91400000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) 00:56:23 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:23 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, "db326dcc3c9ca22a9df348dd4e0985c6e57cecd6ce8fe5e10e53b09d317593bfacc12303e983bdc9b12b80d22a2a176230db95650ee7e25aff0151e755c715f39a3daf9877839d32b54362101480c68b"}, 0xd8) 00:56:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x206c, 0x0, 0x0, 0x0, 0x2b, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0xb) 00:56:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 00:56:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x34000}, 0x14}}, 0x0) 00:56:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x400300}, 0x14}}, 0x0) 00:56:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) [ 752.488032] Bluetooth: hci0: command 0x0401 tx timeout 00:56:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x3, 0x70, 0x3f, 0xbd, 0x9, 0xd5, 0x0, 0x401, 0x1800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x2, 0x8000}, 0x0, 0x6, 0x2, 0x5, 0x7, 0x7f, 0x4}) 00:56:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 00:56:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x700, "b97829", 0x6}) 00:56:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x700, "b97829", 0x6}) 00:56:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xf0ffff}, 0x14}}, 0x0) 00:56:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x8, 0xd1, 0x32, 0x40, 0x0, 0x1, 0x81000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xce, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x10001, 0x1000, 0x9, 0x9, 0x8, 0x3, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) 00:56:24 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xbf) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xe9e) 00:56:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x1000000}, 0x14}}, 0x0) 00:56:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, [], 0x1}}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) timerfd_create(0x2, 0x80000) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3, 0x1, 0x1, 0x80, 0x0, 0x3f, 0x10, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0xb1c0, 0x9, 0x2, 0x2, 0x8, 0x2, 0xc200}, 0x0, 0x2, r0, 0x1) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_DEBUG={0x8}]}, 0x58}}, 0x20004050) 00:56:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x2000000}, 0x14}}, 0x0) 00:56:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x4000000}, 0x14}}, 0x0) 00:56:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x900008c8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x1b}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x80) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) [ 753.314720] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 753.335815] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:56:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x6000000}, 0x14}}, 0x0) 00:56:24 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x7, 0x3, 0x46, 0x7, 0x0, 0xaaa7, 0x4000, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x404, 0x2, 0x8, 0x1, 0xc8, 0x6, 0x8001}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0xce, 0x9, 0x71, 0x81, 0x0, 0x3f, 0x2628, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_config_ext={0x100000000, 0x9a}, 0x400, 0x6, 0x7, 0xe, 0x2, 0x0, 0x9}) [ 753.687836] Bluetooth: hci2: command 0x0401 tx timeout 00:56:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x8000000}, 0x14}}, 0x0) 00:56:25 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 00:56:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xe000000}, 0x14}}, 0x0) 00:56:25 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:25 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xf000000}, 0x14}}, 0x0) 00:56:25 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e5114da, 0x3}, 0x206c, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x80) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f00000000c0)) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb, 0x10001, 0x2, 0x7, 0x860, r2, 0x2, [], r3, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x40) 00:56:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x60000000}, 0x14}}, 0x0) 00:56:25 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xa5b44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4296e, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x400) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) 00:56:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x9effffff}, 0x14}}, 0x0) [ 754.567851] Bluetooth: hci0: command 0x0401 tx timeout 00:56:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x2}) 00:56:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xaa1c0000}, 0x14}}, 0x0) 00:56:26 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x81, 0x20, 0x0, 0x3, 0x0, 0xc, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdcf3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x808, 0x3, 0x8000, 0x5, 0x6, 0x0, 0x20}, 0xffffffffffffffff, 0x5, r0, 0x8) 00:56:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x2}) 00:56:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xf0ffffff}, 0x14}}, 0x0) 00:56:26 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 00:56:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xfffff000}, 0x14}}, 0x0) 00:56:26 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 00:56:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xffffff7f}, 0x14}}, 0x0) 00:56:26 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@nl, &(0x7f0000000100)=0x80) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000140)) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9ace, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12064, 0x2, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:56:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xffffff9e}, 0x14}}, 0x0) 00:56:26 executing program 4: r0 = socket(0xf, 0x0, 0x9) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0x26}}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x100}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040810}, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) [ 755.767625] Bluetooth: hci2: command 0x0401 tx timeout 00:56:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x3}) 00:56:27 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x2, 0x3}, 0x6) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x4, 0x70, 0x25, 0x7, 0x7, 0x0, 0x0, 0x9, 0xe0728, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x41600, 0x78, 0x0, 0x3, 0xa9, 0xfffffffd, 0x9}) 00:56:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xfffffff0}, 0x14}}, 0x0) 00:56:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x3}) 00:56:27 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x2, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004091}, 0x40084) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0xffffffff}, 0x14}}, 0x0) 00:56:27 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) 00:56:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:56:27 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sulogin_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x98}, 0x1, 0x0, 0x0, 0xc014}, 0x4000000) 00:56:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 00:56:27 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:56:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 756.647669] Bluetooth: hci0: command 0x0401 tx timeout 00:56:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x4}) 00:56:28 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x206c, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) 00:56:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:56:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x4}) 00:56:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 00:56:28 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) sched_getparam(r2, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x4, 0x1, 0x46, 0x3, 0x0, 0x3, 0x80000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x9, 0x8}, 0x12, 0x5, 0x5ef, 0x8, 0x6, 0x10001, 0x401}, r1, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) 00:56:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:28 executing program 4: select(0x40, &(0x7f0000000080)={0x6, 0xfffffffffffffffa, 0xce, 0x6, 0xfffffffffffffffc, 0x3, 0x9, 0x6}, &(0x7f00000000c0)={0x8001, 0x5, 0x2, 0x7, 0x0, 0x4, 0x80, 0x7}, &(0x7f0000000100)={0x6c2, 0x7f, 0x401, 0x9, 0x9, 0x1, 0x6, 0x7}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5b44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x206c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) setpgid(r0, 0x0) 00:56:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x2}}, 0x14}}, 0x0) 00:56:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x4}}, 0x14}}, 0x0) 00:56:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x6}}, 0x14}}, 0x0) 00:56:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x5}) 00:56:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x8}}, 0x14}}, 0x0) 00:56:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x5}) 00:56:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x4}) [ 757.847580] Bluetooth: hci2: command 0x0401 tx timeout 00:56:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0xe}}, 0x14}}, 0x0) 00:56:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0xf}}, 0x14}}, 0x0) 00:56:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x60}}, 0x14}}, 0x0) 00:56:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}}, 0x0) 00:56:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0x4}}, 0x14}}, 0x0) 00:56:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0x6}}, 0x14}}, 0x0) 00:56:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x7}) 00:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0x8}}, 0x14}}, 0x0) 00:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0xe}}, 0x14}}, 0x0) 00:56:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x7}) 00:56:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x4}) [ 758.727740] Bluetooth: hci0: command 0x0401 tx timeout 00:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0xf}}, 0x14}}, 0x0) 00:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0x60}}, 0x14}}, 0x0) 00:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0xf0}}, 0x14}}, 0x0) 00:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0x600}}, 0x14}}, 0x0) 00:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0xe00}}, 0x14}}, 0x0) 00:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0xf00}}, 0x14}}, 0x0) 00:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0x1caa}}, 0x14}}, 0x0) 00:56:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x8}) 00:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0x6000}}, 0x14}}, 0x0) 00:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0xaa1c}}, 0x14}}, 0x0) 00:56:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x8}) 00:56:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x4}) 00:56:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0xf000}}, 0x14}}, 0x0) 00:56:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331, 0x0, 0x0, {0x6, 0x0, 0xffff}}, 0x14}}, 0x0) 00:56:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0xf}}, 0x0) 00:56:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0xc0}}, 0x0) 00:56:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0xec0}}, 0x0) 00:56:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x33fe0}}, 0x0) 00:56:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x7ffff}}, 0x0) [ 759.927366] Bluetooth: hci2: command 0x0401 tx timeout 00:56:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x0, 0x5f58, "f6ceea", 0x4, 0x1}) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x0, 0x25, 0x0, "afe050543cc830d16519fbac6a0fc06a5f11403bfe3a049173d30280210df2bf165ea65683954838a2cd5c215c01ea5e4d2b967c2186faeaeb797db3503c4ac093c90e89c564620af838687f65b24db6"}, 0xd8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x20000314}}, 0x0) 00:56:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x7ffff}}, 0x0) 00:56:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="c6f7a261d73f7d9bf29022beba54d72d46b29fcdfb96334693c9f46254c6a92b664bbf4322eab1c91cd656e04612a4aa5176"], 0x6) clock_getres(0x0, &(0x7f0000000100)) r3 = syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000280)=0x10000) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x8, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x468400, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f00000001c0)=0x7ff, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x2, [0xfffffb5a, 0x9], 0x5}, 0x10) pipe(&(0x7f0000000140)) socket$l2tp(0x2, 0x2, 0x73) 00:56:31 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x4}) 00:56:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x7ffff}}, 0x0) 00:56:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x7ffff000}}, 0x0) 00:56:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x7ffff}}, 0x0) 00:56:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x7ffff}}, 0x0) 00:56:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x33fe0}}, 0x0) 00:56:32 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x4}) 00:56:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0xfffffdef}}, 0x0) [ 760.807441] Bluetooth: hci0: command 0x0c1a tx timeout 00:56:32 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$RAW_CHAR_CTRL_GETBIND(r0, 0xac01, &(0x7f0000000000)={0x0, 0x7, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x7ffff}}, 0x0) 00:56:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x33fe0}}, 0x0) 00:56:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000802}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044045}, 0x40010) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0xc000, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000140)={0x0, [0x7f, 0x9], 0x62}, 0x10) 00:56:32 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x4}) 00:56:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x2}, 0x0) 00:56:32 executing program 1: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x7ffff}}, 0x0) 00:56:32 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x4}) 00:56:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x33fe0}}, 0x0) 00:56:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x6}, 0x0) 00:56:33 executing program 1: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x7ffff}}, 0x0) 00:56:33 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x4}) [ 762.007227] Bluetooth: hci2: command 0x0401 tx timeout 00:56:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@alg={0xf8, 0x10, 0x20, 0x70bd26, 0x25dfdbfe, {{'gcm_base(cbc-aes-ce,sha3-384-generic)\x00'}, [], [], 0x2400, 0x2000}, [{0x8, 0x1, 0x10000}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0xfff}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x7}, 0x0) 00:56:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x33fe0}}, 0x0) 00:56:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:56:33 executing program 1: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x7ffff}}, 0x0) 00:56:33 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0x4}) 00:56:33 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x33fe0}}, 0x0) 00:56:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x8}, 0x0) 00:56:33 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x33fe0}}, 0x0) 00:56:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x7ffff}}, 0x0) 00:56:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:56:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x9}, 0x0) [ 762.897253] Bluetooth: hci0: command 0x0c1a tx timeout 00:56:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x0, '\x00\x00b', 0x6}) 00:56:34 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x33fe0}}, 0x0) 00:56:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:56:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'geneve0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) 00:56:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x7ffff}}, 0x0) 00:56:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x300}, 0x0) 00:56:34 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x33fe0}}, 0x0) 00:56:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:56:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x7ffff}}, 0x0) 00:56:34 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x33fe0}}, 0x0) 00:56:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0xffffff1f}, 0x0) 00:56:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x0, 0x4}) [ 764.087127] Bluetooth: hci2: command 0x0401 tx timeout 00:56:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x80, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="04002dbd7000fedbdf25010000000c00080000000000000000001c00078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00020000000000000000000c00030006000000000000000c00030009000000000000005400078008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="080001003cfc5c7157e7da98c16665010c644fe2f11a9c4b16a859e79864c433fe8e7ac94777eb84", @ANYRES32, @ANYBLOB="0c000300e0fcffffffffffff0c00020020000000000000000c0002000700000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:56:35 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x33fe0}}, 0x0) [ 764.967054] Bluetooth: hci0: command 0x0401 tx timeout 00:56:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) write$bt_hci(r1, &(0x7f0000000140)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@fixed={[], 0x11}}}}, 0xe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000000)="50256aaf32714987cd7e531274953ce4d0be0026e20297b9fb6e08103a20fa83ae60f54c04cd10272819fc2bf4efe4b6cf25b13fc1098a67cb72daeba6e508cedd616fe6ed4d7bda3607bb85e46570bedc36cd77354b39ae2781e3952f593ff9c1c4ce1aa3901f6626fbaa20202121e9acf7edce34e4a35328e4bebcf789fa2cc9afd10eb4c58806d83e0ffeb3ecd8c2a4a5989d3d4bb79fa1238eb282d9cc8d9014d9cea4d1c99fcee6577a96d20ec14398893480d1d3b6e4f87828afe98515f3cc06770b5f5f95ac02555f24019ecdd8ee815055f02015abba7ed7bf372b5173667736ba2219a7a79520aa36d679e4ff36") 00:56:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x2}, 0x0) 00:56:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:56:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:56:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829"}) 00:56:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x1, r0, 0x6}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829"}) 00:56:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:56:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:56:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x4}, 0x0) 00:56:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @empty}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x24}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x2f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)={0x1, 0x9, 0x4, 0x400, 0x0, {r2, r3/1000+10000}, {0x4, 0x8, 0x37, 0xf9, 0x2, 0x3, "093a66f0"}, 0x3, 0x1, @fd=r1, 0x7, 0x0, r1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00082bbd7000fbdbdf2502000000080002000800000008000300000000003c0001800800060006000000060005004e20000008000600000000000800060004000000050002003f0000000500020001000000010000000a00000065eb59296b74cf8648f2da0db54ab8fbe09924d9ed12b4088e36c2a23241d14a3619f526bc077265e552f4acf445085e4f5ab756960587e3655a7fe04ed79b25dee1"], 0x60}, 0x1, 0x0, 0x0, 0x44801}, 0x40004) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)={0x400, 0x0, 0x4, 0x400, 0x9, {0x0, 0x2710}, {0x5, 0x1, 0x9, 0x8, 0x5, 0x5, "d00f9c5c"}, 0x2d3b, 0x3, @fd=r1, 0x4, 0x0, r5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x71, 0x80000}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) syz_open_dev$video4linux(&(0x7f0000000440)='/dev/v4l-subdev#\x00', 0x2d8, 0x280100) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x6, [0x9, 0x7], 0x4}, 0xfffffcc1) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x101000) bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:56:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 765.446959] Bluetooth: hci1: command 0x0401 tx timeout [ 766.166845] Bluetooth: hci2: command 0x0401 tx timeout 00:56:37 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:56:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x6}, 0x0) 00:56:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x80, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="04002dbd7000fedbdf25010000000c00080000000000000000001c00078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00020000000000000000000c00030006000000000000000c00030009000000000000005400078008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="080001003cfc5c7157e7da98c16665010c644fe2f11a9c4b16a859e79864c433fe8e7ac94777eb84", @ANYRES32, @ANYBLOB="0c000300e0fcffffffffffff0c00020020000000000000000c0002000700000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:37 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:56:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x8}, 0x0) 00:56:37 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0xe2}) 00:56:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) 00:56:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) [ 767.046918] Bluetooth: hci0: command 0x0401 tx timeout 00:56:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x1}}, 0x18) 00:56:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xe}, 0x0) 00:56:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) 00:56:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:56:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) write$bt_hci(r1, &(0x7f0000000140)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@fixed={[], 0x11}}}}, 0xe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000000)="50256aaf32714987cd7e531274953ce4d0be0026e20297b9fb6e08103a20fa83ae60f54c04cd10272819fc2bf4efe4b6cf25b13fc1098a67cb72daeba6e508cedd616fe6ed4d7bda3607bb85e46570bedc36cd77354b39ae2781e3952f593ff9c1c4ce1aa3901f6626fbaa20202121e9acf7edce34e4a35328e4bebcf789fa2cc9afd10eb4c58806d83e0ffeb3ecd8c2a4a5989d3d4bb79fa1238eb282d9cc8d9014d9cea4d1c99fcee6577a96d20ec14398893480d1d3b6e4f87828afe98515f3cc06770b5f5f95ac02555f24019ecdd8ee815055f02015abba7ed7bf372b5173667736ba2219a7a79520aa36d679e4ff36") 00:56:38 executing program 3: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x8, 0x70bd24, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x850) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) 00:56:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) 00:56:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf}, 0x0) 00:56:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 00:56:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) 00:56:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x60}, 0x0) [ 768.256664] Bluetooth: hci2: command 0x0401 tx timeout 00:56:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) 00:56:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 00:56:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf0}, 0x0) 00:56:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0xffffc3db, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x4, 0x3}, 0x6) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000140), 0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '^\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000030) r4 = socket$nl_crypto(0x10, 0x3, 0x15) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @multicast2}, 0x4, 0x4, 0x3, 0x2}}, 0x2e) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xd8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x88}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x39}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4020000}, 0x4000000) 00:56:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0xe2}) 00:56:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)) 00:56:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 00:56:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 00:56:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x600}, 0x0) 00:56:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xe00}, 0x0) 00:56:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x7ffff}}, 0x0) 00:56:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 00:56:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf00}, 0x0) 00:56:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @empty}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x24}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x2f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)={0x1, 0x9, 0x4, 0x400, 0x0, {r2, r3/1000+10000}, {0x4, 0x8, 0x37, 0xf9, 0x2, 0x3, "093a66f0"}, 0x3, 0x1, @fd=r1, 0x7, 0x0, r1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00082bbd7000fbdbdf2502000000080002000800000008000300000000003c0001800800060006000000060005004e20000008000600000000000800060004000000050002003f0000000500020001000000010000000a00000065eb59296b74cf8648f2da0db54ab8fbe09924d9ed12b4088e36c2a23241d14a3619f526bc077265e552f4acf445085e4f5ab756960587e3655a7fe04ed79b25dee1"], 0x60}, 0x1, 0x0, 0x0, 0x44801}, 0x40004) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)={0x400, 0x0, 0x4, 0x400, 0x9, {0x0, 0x2710}, {0x5, 0x1, 0x9, 0x8, 0x5, 0x5, "d00f9c5c"}, 0x2d3b, 0x3, @fd=r1, 0x4, 0x0, r5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x71, 0x80000}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) syz_open_dev$video4linux(&(0x7f0000000440)='/dev/v4l-subdev#\x00', 0x2d8, 0x280100) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x6, [0x9, 0x7], 0x4}, 0xfffffcc1) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x101000) bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:56:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) [ 769.136702] Bluetooth: hci0: command 0x0401 tx timeout 00:56:41 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x105080) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "bd7806"}) pipe(&(0x7f0000000040)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) 00:56:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x1caa}, 0x0) 00:56:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x33fe0}}, 0x0) 00:56:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0xe2}) 00:56:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'geneve0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) 00:56:41 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/93, 0x5d}], 0x1}, 0x40000002) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x9, "b97829", 0x6}) 00:56:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x6000}, 0x0) 00:56:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x1, "84d0cd", 0x3f, 0x3f}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xfffe, 0x4}, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x1, 0x2}, 0x6) 00:56:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0xffffc3db, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x4, 0x3}, 0x6) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000140), 0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '^\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000030) r4 = socket$nl_crypto(0x10, 0x3, 0x15) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @multicast2}, 0x4, 0x4, 0x3, 0x2}}, 0x2e) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xd8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x88}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x39}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4020000}, 0x4000000) 00:56:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x404, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4094}, 0x24024010) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x2, 0x4, 0x1}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xaa1c}, 0x0) 00:56:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf000}, 0x0) 00:56:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x34000}, 0x0) 00:56:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x400300}, 0x0) 00:56:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf0ffff}, 0x0) [ 770.326513] Bluetooth: hci2: command 0x0401 tx timeout 00:56:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0xe2}) 00:56:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf0ffff}, 0x0) 00:56:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x1000000}, 0x0) 00:56:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x2000000}, 0x0) [ 771.206819] Bluetooth: hci0: command 0x0401 tx timeout 00:56:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x101, 0x4) r2 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000140)={0xffff, 0x3, "552e5109d505e8b3f274b11c8566930938a0e6e910ea21bbb62132241f0b8595", 0x8e2, 0x6, 0xffffffff, 0x7, 0x4}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x602f, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={0x0, 0x6, 0x400}) 00:56:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf0ffff}, 0x0) 00:56:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x4000000}, 0x0) 00:56:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:56:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0xffffc3db, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x4, 0x3}, 0x6) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000140), 0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '^\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000030) r4 = socket$nl_crypto(0x10, 0x3, 0x15) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @multicast2}, 0x4, 0x4, 0x3, 0x2}}, 0x2e) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xd8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x88}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x39}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4020000}, 0x4000000) 00:56:42 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0xe2}) 00:56:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x0, 0x4}) 00:56:43 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0xe2}) 00:56:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x6000000}, 0x0) 00:56:43 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0xe2}) 00:56:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x8000000}, 0x0) 00:56:43 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0xe2}) 00:56:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000000)={0x1, 0x7, 0x0}) 00:56:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xe000000}, 0x0) 00:56:43 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0xe2}) 00:56:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0xffffc3db, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x4, 0x3}, 0x6) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000140), 0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '^\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000030) r4 = socket$nl_crypto(0x10, 0x3, 0x15) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @multicast2}, 0x4, 0x4, 0x3, 0x2}}, 0x2e) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xd8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x88}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x39}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4020000}, 0x4000000) 00:56:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x0, 0x4}) 00:56:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf000000}, 0x0) 00:56:43 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0xe2}) 00:56:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x60000000}, 0x0) 00:56:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:56:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x9effffff}, 0x0) 00:56:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) [ 773.286553] Bluetooth: hci0: command 0x0401 tx timeout 00:56:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xaa1c0000}, 0x0) 00:56:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:56:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0xffffc3db, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x4, 0x3}, 0x6) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000140), 0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '^\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000030) r4 = socket$nl_crypto(0x10, 0x3, 0x15) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @multicast2}, 0x4, 0x4, 0x3, 0x2}}, 0x2e) 00:56:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0xffffffc1, 0x3, 0x10001}) 00:56:44 executing program 0: ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000080)={0x4, @sdr={0x31435750, 0x1}}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x3, 0x1, "9fc429", 0x0, 0x5}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 00:56:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x9effffff}, 0x0) 00:56:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0xa8, 0x4, 0x2, 0x80}, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829"}) 00:56:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf0ffffff}, 0x0) 00:56:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:56:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xfffff000}, 0x0) 00:56:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf0ffffff}, 0x0) 00:56:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xffffff7f}, 0x0) 00:56:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:56:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0xffffc3db, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x4, 0x3}, 0x6) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000140), 0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '^\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000030) socket$nl_crypto(0x10, 0x3, 0x15) 00:56:45 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="00022dbd7000fedbdf25040000080019000a01010208000a00040000000500220001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48090}, 0x24000854) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = socket(0x29, 0x4, 0x6) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="610e9234fb4818906701233971852939fabac633a735b688f75790569913a2d4825a044ed8486b7f2f44da4939f8451dc7b9f6be07b61dd15ab985fbfe124a587ad07aed616cf51c60e95f0f8f58a013bd5a137731c3cf7746d968dffa3f4b176024d138960cc18d50de8ec58ca41710875bb558472b075902b40674485cb0713ad42bed5d8b98597fb6ad03e86495c7333dcb3fd44a7d9b11067600"/166, @ANYRES16=r3, @ANYBLOB="080026bd7000fddbdf25030000000c0004000700000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x8840) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x8000, 0x40, '\x00', 0x6, 0xf7}) 00:56:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xffffff9e}, 0x0) 00:56:45 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0xe2}) 00:56:46 executing program 0: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x3, 0x0, "00eb78", 0x6}) 00:56:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829"}) 00:56:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xfffffff0}, 0x0) 00:56:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829"}) 00:56:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "a35f00", "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"}}, 0x110) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) 00:56:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0xffffc3db, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x4, 0x3}, 0x6) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000140), 0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '^\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000030) 00:56:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x40030000000000}, 0x0) 00:56:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf0ffffffffffff}, 0x0) [ 775.366429] Bluetooth: hci0: command 0x0401 tx timeout 00:56:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x100000000000000}, 0x0) 00:56:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x200000000000000}, 0x0) 00:56:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x400000000000000}, 0x0) 00:56:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x600000000000000}, 0x0) 00:56:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x8, 0x1, 0x4, 0x8, 0x752, {0x0, 0xea60}, {0x2, 0x2, 0x8, 0x80, 0x20, 0x9, "0c98409b"}, 0x467f7066, 0x4, @planes=&(0x7f0000000080)={0x9f, 0x1f, @fd=0xffffffffffffffff, 0xb5}, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={r1, 0x1, r2, 0x100}) 00:56:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x800000000000000}, 0x0) 00:56:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x40030000000000}, 0x0) 00:56:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829"}) 00:56:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xfffc, 0x0, "78a900", 0x6, 0x1}) 00:56:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0xffffc3db, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x4, 0x3}, 0x6) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000140), 0x4) 00:56:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "a35f00", "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"}}, 0x110) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) 00:56:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xe00000000000000}, 0x0) 00:56:47 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x4, 0x0, "b97829", 0x4, 0x42}) 00:56:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xfffffff0}, 0x0) 00:56:47 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0xfffc, 0x0, '\x00', 0x86, 0x7f}) 00:56:47 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x4, 0x0, "b97829", 0x4, 0x42}) 00:56:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r1}}, 0x38) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {r1, 0x40, "077c86", "62cb2325ed6c59ba6d124696bba7343ddc1d62a3bb14f4224107af05c2c5bca9e3ee8e2902eeaa841b00f719e97fdc8abb799d3e3d5f8360609ce9ca5a7bc3b5f4895b0680a96918d5a0e18abacabd21fce5b9c2524bed46bdb89e2c8b2fa4374eeeb90a7ad4b4995f89415ca42e533daff91950a1ac90ffa29b7fa6a1781bae07841b33ae52098a92ab60fe29fefd5002e85fa9a212bffc7bec4d6a9fbf5da64d728f19032061423f25aad07896d73039f8f6ef1c8839d68cabdd3958b52202c88d42cfcdd20d2a71499acdd7bd62d53560f9c969008096504a118f167e377ac195ce010a716893586f963b6f57a77a6bc5905bfc3fcc808e7a1b7e476f1420"}}, 0x110) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x4}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0xffffc3db, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x4, 0x3}, 0x6) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) 00:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf00000000000000}, 0x0) 00:56:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xe00000000000000}, 0x0) 00:56:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x10, '\x00', 0x6}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r0, 0x3}) 00:56:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "a35f00", "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"}}, 0x110) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) 00:56:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0xa8, 0x4, 0x2, 0x80}, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x6000000000000000}, 0x0) 00:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x9effffff00000000}, 0x0) 00:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xaa1c000000000000}, 0x0) 00:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xf0ffffff00000000}, 0x0) [ 777.370361] Bluetooth: hci3: command 0x0401 tx timeout 00:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) [ 777.446418] Bluetooth: hci4: command 0x0401 tx timeout [ 777.471793] Bluetooth: hci0: command 0x0401 tx timeout 00:56:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "04003c", 0x6}) 00:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0xfffffffffffff000}, 0x0) 00:56:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "a35f00", "dd7d6bd2c66c1433e7ec5e5e1704334df80bdf7ae525156bb4aae0e12720c6ee0fe5829364bd9331668c28b8d28cf5327400caaa4c055554ca0ed92925640b2a355e660518bcc016870daae72b077b93be8c080acdd879775de93f7d78a0fd924fe3eb8fa5f25ef0d6bc6e2aca704488f120c5fdf42b91b31e3645112625547d84c7b29a08de6912f154bb80d24f519787a915f91ebae67088869064ff4f7a96f5432397e56647e98da250157149df8f719d95f2b72e1c667f49e437b2b47ccef556802655e02e7fdf1565f1975214f66e52ab50fc0a13ddf40d377f3d6672f0c04dd5737396a0b5db7cdea9db5b4763face3814817ea0662be64bd10e1542fe"}}, 0x110) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) 00:56:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0xffffc3db, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x4, 0x3}, 0x6) accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) 00:56:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x26, 0x0, 0xf9c8) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1082020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @local}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8091}, 0x40000c0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0x39}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x40}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40804}, 0x20040050) 00:56:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0xa8, 0x4, 0x2, 0x80}, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x2}, 0x0) 00:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x4}, 0x0) 00:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x6}, 0x0) [ 778.292030] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 00:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x8}, 0x0) 00:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xe}, 0x0) 00:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xf}, 0x0) 00:56:50 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x60}, 0x0) 00:56:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0xffffc3db, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) 00:56:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "a35f00", "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"}}, 0x110) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:56:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008034}, 0xc000) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000001c0)=0x9, 0x4) 00:56:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0xa8, 0x4, 0x2, 0x80}, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xf0}, 0x0) 00:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x600}, 0x0) 00:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xe00}, 0x0) 00:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xf00}, 0x0) 00:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x1caa}, 0x0) 00:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x6000}, 0x0) [ 779.445962] Bluetooth: hci3: command 0x0401 tx timeout [ 779.526115] Bluetooth: hci0: command 0x0401 tx timeout [ 779.533159] Bluetooth: hci4: command 0x0401 tx timeout 00:56:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x80, 0xffff, "b97829", 0x4, 0xfe}) 00:56:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xaa1c}, 0x0) 00:56:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0xffffc3db, 0x4) accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) 00:56:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0xa8, 0x4, 0x2, 0x80}, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000000)="3495332b2270d5d08e71e338af95c8a77d2e5e1490331a70aba059c75f9f61058c34c35afd57e6fe665761e73c4739d00950e4469160c69b2d15c91587a59684b07c0fb08d7a426c8652b98782eb881427cdc7b8cd2877ddc0a881054a697bcd9be81aa9b9c49ae6abf20472937d42940132c30c236f98de609c3a33559bd61b752afe9ee0776e272b9e57651a3e9730ec6a0e") ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r2 = accept(r1, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000180)={0x5, [0x6, 0x4], 0x81}, 0x10) 00:56:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "a35f00", "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"}}, 0x110) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:56:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xf000}, 0x0) 00:56:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)=0xf900) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "000004", 0x6}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x20000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x113281) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000000)={0xf2, [0x5, 0x8], 0x82}, 0x10) 00:56:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000280)) accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) 00:56:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x34000}, 0x0) 00:56:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x400300}, 0x0) 00:56:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) 00:56:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xf0ffff}, 0x0) 00:56:51 executing program 5: accept(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) 00:56:51 executing program 5: accept(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) 00:56:52 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0xa8, 0x4, 0x2, 0x80}, 0x14) 00:56:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "011700", 0x6}) 00:56:52 executing program 5: accept(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) 00:56:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0) 00:56:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, '\x00', 0x6}) socket$pppl2tp(0x18, 0x1, 0x1) 00:56:52 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "a35f00", "dd7d6bd2c66c1433e7ec5e5e1704334df80bdf7ae525156bb4aae0e12720c6ee0fe5829364bd9331668c28b8d28cf5327400caaa4c055554ca0ed92925640b2a355e660518bcc016870daae72b077b93be8c080acdd879775de93f7d78a0fd924fe3eb8fa5f25ef0d6bc6e2aca704488f120c5fdf42b91b31e3645112625547d84c7b29a08de6912f154bb80d24f519787a915f91ebae67088869064ff4f7a96f5432397e56647e98da250157149df8f719d95f2b72e1c667f49e437b2b47ccef556802655e02e7fdf1565f1975214f66e52ab50fc0a13ddf40d377f3d6672f0c04dd5737396a0b5db7cdea9db5b4763face3814817ea0662be64bd10e1542fe"}}, 0x110) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:56:52 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) 00:56:52 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40000) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0) 00:56:52 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) 00:56:52 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x4000000}, 0x0) [ 781.606137] Bluetooth: hci4: command 0x0401 tx timeout [ 781.614118] Bluetooth: hci0: command 0x0401 tx timeout 00:56:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x5, "8a5f13", 0x7, 0x9}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES64=r5, @ANYRESDEC=r3], 0x58}}, 0x20004010) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf250000000005001200060000000800090002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0x801) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "7b0129", 0x6}) 00:56:53 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:53 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80) 00:56:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x6000000}, 0x0) 00:56:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:56:53 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r0, 0x0, &(0x7f0000000100)) 00:56:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x8000000}, 0x0) 00:56:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r0, 0x0, 0x0) 00:56:53 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40000) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xe000000}, 0x0) 00:56:54 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0xfffc, 0x0, 0xcc96, 0x8001, 0xfffffffffffffff7, 0xffff, 0x11, 0x4}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x2, 0x2) syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xf000000}, 0x0) 00:56:54 executing program 4: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x40000) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:56:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fedbdf2505000000080004006401010214000200fc00000000000000000000000000000008000500e0000001"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') 00:56:54 executing program 4: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x40000) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x60000000}, 0x0) 00:56:54 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40000) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:54 executing program 4: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x40000) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) [ 783.695889] Bluetooth: hci0: command 0x0401 tx timeout [ 783.704040] Bluetooth: hci4: command 0x0401 tx timeout 00:56:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 00:56:55 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40000) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xaa1c0000}, 0x0) 00:56:55 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:56:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket(0x22, 0xa, 0x6) r1 = socket(0x2c, 0x6, 0x9) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000400)={0x0, [0x80000001], 0x4fa8}, 0x10) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000100)="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") recvmsg$can_bcm(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/178, 0xb2}], 0x2, &(0x7f0000000480)=""/4096, 0x1000}, 0x10000) r4 = getpgid(0x0) sendmsg$AUDIT_SET(r3, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x38, 0x3e9, 0x8, 0x70bd25, 0x25dfdbfc, {0x3, 0x0, 0x0, r4, 0x49, 0x7f, 0x5, 0x0, 0x0, 0xfffff801}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000805) 00:56:55 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40000) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:55 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xf0ffffff}, 0x0) 00:56:55 executing program 5: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:55 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xfffff000}, 0x0) 00:56:56 executing program 5: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:56 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) 00:56:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:56:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x26}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '/dev/cachefiles\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001400)='/dev/cachefiles\x00', 0x183800, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x0, 0x4, 't&:', 0x0, 0x80}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x6) 00:56:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x5}}}, 0x90) 00:56:56 executing program 5: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xffffff9e}, 0x0) 00:56:56 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x0) timerfd_gettime(r0, 0x0) 00:56:56 executing program 5: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x40000) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xfffffff0}, 0x0) 00:56:56 executing program 5: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x40000) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:56 executing program 4: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0xfffc, 0x0, 0xcc96, 0x8001, 0xfffffffffffffff7, 0xffff, 0x11, 0x4}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x2, 0x2) syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:56 executing program 5: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x40000) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 785.766247] Bluetooth: hci4: command 0x0401 tx timeout [ 785.773355] Bluetooth: hci0: command 0x0401 tx timeout 00:56:57 executing program 3: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x2, 0x0, "b97829", 0x4, 0x7f}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'batadv_slave_1\x00'}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x4003, 0x9, '\x00\a\x00', 0x0, 0x27}) 00:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 00:56:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000080)="4cc391f1414c13b203aa3f63547826c7eedff657c55bb64e2ca7920dae21e51a37fefcf3a22916ccd1df9e3c63667646e39a35e0681cc999c39ffa23ac00f991d4405ba3079c02c5d67bdfe916303f146de0ee10880139816d88e772dfb6cc6cf0cb0cadcc3706045babd1df45279e9d5447c8edcee9e2daaf0a11d13d269ee424dbdae3901de7bd") ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = socket(0x2b, 0xa, 0xffffffff) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '$\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40008d6) 00:56:57 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 00:56:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:56:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x40030000000000}, 0x0) 00:56:57 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fedbdf2505000000080004006401010214000200fc00000000000000000000000000000008000500e0000001"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') 00:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) 00:56:57 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x200000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x76, '\x00', 0x8, 0x4}) 00:56:57 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) 00:56:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, '\x00', 0x6, 0x4}) pipe(&(0x7f0000000040)) 00:56:57 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) 00:56:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000100)) 00:56:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x400000000000000}, 0x0) 00:56:58 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x0) timerfd_gettime(r0, 0x0) 00:56:58 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:56:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 00:56:58 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000005bc481f5c248b4b14242ea8abd948b5a3ace1279adb2d68359db3a2c6d5a273fdff4fd6fd7d7d280a7a372e0edab7c97f2fb55ad092c861c00387d5e7753767ef2c0ce3c93000615c6b086d5e77779bed91bb047029d0d12e6a41f27703dd6526d0927abab017888f7065de1f3d8406c372e7b470d8b5532d42a58386b6a07f05d5bbda3ebc06df552e0ca030e8a085f1f1e94efb01580073d88956b33acc52c6508aafc47fe3798fab315eeac8ab166a9c2fc73e4963dcacb153a2735391346286842ea30dc5c4a3326dedf03edd61d80dc640aff30e750411e7feb7c03dd2c7916ec38aa6ee246eab88d565732d5a4384b56", @ANYRES16=r0, @ANYBLOB="e30028bd5b00ffdb09000600005d"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 00:56:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x600000000000000}, 0x0) 00:56:58 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:56:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, '\x00', 0x6, 0x4}) pipe(&(0x7f0000000040)) 00:56:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x800000000000000}, 0x0) 00:56:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) [ 787.845817] Bluetooth: hci0: command 0x0401 tx timeout [ 787.852418] Bluetooth: hci4: command 0x0401 tx timeout 00:56:59 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0xe00, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:56:59 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:56:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 00:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xe00000000000000}, 0x0) 00:56:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) accept(r1, &(0x7f0000000080)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x22}, 0x10) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0}) r5 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000200)={r4, 0x1, r5, 0x9, 0x80000}) 00:56:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000100)) 00:56:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:56:59 executing program 4: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 00:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xf00000000000000}, 0x0) 00:56:59 executing program 4: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 00:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x6000000000000000}, 0x0) 00:56:59 executing program 4: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 00:57:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 00:57:00 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 00:57:00 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xa}}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x78}) 00:57:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x600000000000000}, 0x0) 00:57:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:57:00 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) [ 789.273633] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xaa1c000000000000}, 0x0) 00:57:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x600000000000000}, 0x0) 00:57:00 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) [ 789.333767] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:57:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 00:57:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 789.560108] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. [ 789.925464] Bluetooth: hci4: command 0x0401 tx timeout [ 789.932212] Bluetooth: hci0: command 0x0401 tx timeout 00:57:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:57:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:57:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 00:57:01 executing program 3: syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x1, 0x3, 0x4, 0x1, 0x23, {0x0, 0xea60}, {0x5, 0xc, 0xff, 0x80, 0x4, 0x1c, "c7f21763"}, 0x5c02, 0x4, @fd=r1, 0xc3, 0x0, r2}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) write$bt_hci(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="010b03ed00000000000040"], 0xb) 00:57:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 790.123832] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:57:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) [ 790.247469] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:57:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7, 0x202040) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x6, 0x6, "84cce74f167151d4eff5b8f726d78f483eebbdfb0d33c184cd0e95b5d12800", 0x10001, 0xcc0, 0xb67, 0x9, 0x6}) 00:57:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 00:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:57:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:57:02 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x1, {0xa, 0x4e21, 0x2, @empty, 0x6}, r0}}, 0x38) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000000)={0x0, 0x7, 0x0}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0x1, 0x101, "5fc93f476588335fd1e3fef2eed5cdf219a593c29fbd5332a2bc47cd7d7af46d", 0x0, 0x1ff, 0x6, 0x81, 0x100}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r4}}, 0x38) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) 00:57:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x9effffff}, 0x0) 00:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 00:57:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) [ 791.176581] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:57:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x9effffff}, 0x0) 00:57:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) [ 791.245349] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 791.326100] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:57:03 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x80001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:57:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x9effffff}, 0x0) 00:57:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x0) 00:57:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:57:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r3, 0x9}}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$RAW_CHAR_CTRL_GETBIND(r1, 0xac01, &(0x7f0000000000)={0x0, 0x7, 0x0}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f0000000080)="961803173c43ff2bd53fe221a9bca3fec7d29c37767f6191689a9e0605a56f741751a8c4aa995a3535201cd35f03257d2c2f1b312608b9b0577757a57253e97ecb23ee531b81ce2ced48509f96beea9fe4e2b46ec2a6c12d0180b7936d61dd9e30683102efcebeaaa688c02d7a5a2e47dc3d11895580efb201f8db9e618665b5ad791f978578e959e6b17b0264a56de649ec383cc546e100d9ca9bde6e949f33815fac0d2c0606d3") [ 792.005519] Bluetooth: hci0: command 0x0401 tx timeout [ 792.015464] Bluetooth: hci4: command 0x0401 tx timeout 00:57:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) [ 792.061560] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:57:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 00:57:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_auth_payload_to={{0xc7c, 0x4}, {0xc8, 0x1}}}, 0x8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) 00:57:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:57:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x0) 00:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xe}, 0x0) 00:57:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:57:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) 00:57:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:57:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:04 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) getuid() ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xa, @raw_data="4d199e0e52297cfe013dd431267797ab7e5e752b2494ca572d5251e7169cee6edb15b83762a1b214c1382b10a1123efff051f0e47edfdbcc2d80d026d5cf5db05629406cfce02b36dffd7cafe63fe490067eac11de410efcccdbe1c5b0eda3325ddc97faeb197ab393ac1043126a035024bfa6dca0174469397bf033a2619abba0886b60128c35c5a890c2f111c8692102d5bcffd61bc276d2052c1d5c9ff3ac8d962db9db84953d00a2d28116d66c4961e0e1068391fb52f6a7ca5bcd20124ca822427f52a6e598"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000)="830c5303ccfff00a19f2a69a288e74e37863da7943d19904c0f0c24a321e1c98e26ba24c56b987ce732de9a2bc2cd9dd156284dd38c7b26c3394835b735ad7cde4a99dd5a914b621a2eef98af636588ef3b92143c5f4cbe380db3be6a5ecdb21af4c34737129eeac900a51d7ff9c567f178cd9007b16247541a683c5d3dd4163ddc1ac665c00e9d38abb323a2bff3d784eb9a3cb4b74d81076f8c63e8b2a2727fd7a5b90b28475a7a9d20dcc82671d10340dfd71e2097fedec96396807fe12de2e0d1bc3c530e6a3a3f81ab1cb82a1a22d1cf5317bb0d8da2b72e325b680e8b652cd4dc013086990", &(0x7f0000000100)=@udp=r2, 0x4}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000200)=0x2, 0x4) accept(r3, 0x0, &(0x7f00000001c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0) 00:57:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:57:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:57:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x0) 00:57:04 executing program 3: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x6, ']`%', 0x40, 0xe0}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7fff, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xfffffffffffffe00) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x12003, 0x0) 00:57:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:04 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 00:57:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:04 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:05 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000000c0), 0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 00:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x600}, 0x0) 00:57:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:05 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xe00}, 0x0) [ 794.085326] Bluetooth: hci4: command 0x0401 tx timeout [ 794.092420] Bluetooth: hci0: command 0x0401 tx timeout 00:57:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 00:57:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 00:57:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:57:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 00:57:06 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) [ 794.961539] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 00:57:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x1caa}, 0x0) 00:57:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008090}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @empty}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x9040) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x844) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000011) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x8004) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x141041) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000340)={0x0, 0x0, r0, 0x7, 0x80000}) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000080080c53cc3ad3dff68bb72c63875923442e4081bdea951fa71a6ac96bdc75aaa776196db62704a1a4ee617f6e404902b83aa05ea5a5260625a06b348ec20ba09af2263a413f1d3f3cac1cde04fe44c5adb717d0b0495f497e5f1fc69430a0dc0746d6ebe49905162abf92951473f3e5ccf029d00ec6bcf70ae3d250553d393a47657deae8a630fb24aa51052f64a", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf250300000005000100000000002200070073797374656d5f753a6f626a6563745f723a736861646f775f743a7330000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004804}, 0x20040001) bind$bt_hci(r6, &(0x7f0000000180)={0x1f, 0x1}, 0x6) 00:57:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 00:57:06 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 00:57:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) [ 795.181868] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 795.364827] Bluetooth: hci2: command 0x0401 tx timeout 00:57:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept(0xffffffffffffffff, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}, &(0x7f0000000300)=0x80) getsockopt$inet6_tcp_buf(r1, 0x6, 0x873be8c9499a7f54, &(0x7f0000000340)=""/49, &(0x7f0000000380)=0x31) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 00:57:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={0x4, 0x6, "171275", 0x7a, 0x5}) 00:57:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:07 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 00:57:07 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x180840, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x7, @pix={0x10000, 0x1, 0x33524742, 0x9, 0x4, 0x5c7, 0xa, 0x6, 0x0, 0x2, 0x0, 0x2}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x50, 0x0, "fbc1ccf4defcaa870a37e8070558bdc586546af5c614abdcaa8630668414a8e6181b6d39a12d9829e1f621fa805a33b3ca496cfcd609cc4397b920b0d255904489b758e507191d198f14dcdf0b286b49"}, 0xd8) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000040)={0x0, 0x1}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)={0x9, 0x6, 0x4, 0x100000, 0x3, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x70, 0x9, 0x1, "2378dfa3"}, 0x0, 0x3, @userptr=0xef, 0x6}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x1, r4, 0x0, 0x80000}) [ 795.940433] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:57:07 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 00:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xaa1c}, 0x0) 00:57:07 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 00:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 00:57:07 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 00:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 796.172511] Bluetooth: hci0: command 0x0401 tx timeout [ 796.180097] Bluetooth: hci4: command 0x0401 tx timeout 00:57:08 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x300400, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x6, "a97829", 0x2}) 00:57:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 00:57:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:08 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 00:57:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000885}, 0x800) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1ff, 0x2, "b97829", 0x8}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x300, 0x70bd2a, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x20040804) 00:57:08 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x180840, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x7, @pix={0x10000, 0x1, 0x33524742, 0x9, 0x4, 0x5c7, 0xa, 0x6, 0x0, 0x2, 0x0, 0x2}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x50, 0x0, "fbc1ccf4defcaa870a37e8070558bdc586546af5c614abdcaa8630668414a8e6181b6d39a12d9829e1f621fa805a33b3ca496cfcd609cc4397b920b0d255904489b758e507191d198f14dcdf0b286b49"}, 0xd8) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000040)={0x0, 0x1}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)={0x9, 0x6, 0x4, 0x100000, 0x3, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x70, 0x9, 0x1, "2378dfa3"}, 0x0, 0x3, @userptr=0xef, 0x6}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x1, r4, 0x0, 0x80000}) 00:57:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 00:57:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x8800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x2, 0x4, '\x00', 0xf9}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000180)=0x4, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x4}}, 0x0, 0x0, 0x2015, 0x0, "d844c67020a033e0836b05b6b9f38e7aabdb02f48670a270fab90200771c008332336f86f80e54dab50126dcf7973dd7fee9046adfef14d034c1a600335b051c9435c0ac5da9492c9fbbda00"}, 0xd8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1) 00:57:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0xfffe, "b97829", 0x9}) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc9, 0x4, 0x4, 0x15, 0x1, 0x0, 0x5}}}, 0x12) 00:57:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 00:57:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) 00:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 797.444967] Bluetooth: hci2: command 0x0401 tx timeout 00:57:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, '\x00\x00 ', 0x6, 0x5}) 00:57:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) 00:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:57:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 00:57:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) 00:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 00:57:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x8}) [ 798.244823] Bluetooth: hci4: command 0x0401 tx timeout [ 798.251600] Bluetooth: hci0: command 0x0401 tx timeout 00:57:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 00:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 00:57:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 ', 0x0, 0x5}) 00:57:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 00:57:10 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x49, 0x0, 0x4, 0x8, 0x0, 0x9, 0x4002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x12a, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x20130, 0xeb, 0x7f, 0x4, 0xffffffffffffff80, 0x7, 0x5}, r0, 0xd, 0xffffffffffffffff, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x3}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x80000000, 0x4) 00:57:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 '}) 00:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 00:57:10 executing program 3: mlockall(0x5) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 00:57:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, '\x00\x00 '}) 00:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 00:57:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 00:57:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 00:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 00:57:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 799.524837] Bluetooth: hci2: command 0x0401 tx timeout 00:57:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 00:57:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 00:57:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 00:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 00:57:11 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:57:11 executing program 0: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xaa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0xc0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 00:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xaa1c0000}, 0x0) 00:57:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 00:57:11 executing program 4: mlockall(0x5) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw/rawctl\x00', 0x101c00, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r3, 0x969b, 0x80000}) r4 = socket(0x21, 0x80000, 0x2) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "d58e2c71b0085cb7", "a527c9839b421497ac030e71cf65a9a8", "b9de9eb6", "fa34973da9ad2a8b"}, 0x28) 00:57:11 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) [ 800.324891] Bluetooth: hci0: command 0x0401 tx timeout [ 800.332046] Bluetooth: hci4: command 0x0401 tx timeout 00:57:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 00:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 00:57:11 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 00:57:11 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 00:57:12 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 00:57:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) socket(0x2b, 0x3, 0x3f) clock_gettime(0x3, &(0x7f0000000000)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, '\x00', 0x6}) 00:57:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 00:57:12 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 00:57:12 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 00:57:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 00:57:12 executing program 3: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x800}, 0x8840) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 00:57:12 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 00:57:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 00:57:12 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 00:57:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 00:57:12 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) [ 801.614433] Bluetooth: hci2: command 0x0401 tx timeout 00:57:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw/rawctl\x00', 0x101c00, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r3, 0x969b, 0x80000}) r4 = socket(0x21, 0x80000, 0x2) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "d58e2c71b0085cb7", "a527c9839b421497ac030e71cf65a9a8", "b9de9eb6", "fa34973da9ad2a8b"}, 0x28) 00:57:13 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 00:57:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 00:57:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x18082, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "c88ed82cfe88e707", "68dd80bb8f0acba1426cac4dff0e582d", "61986b9c", "61b3cddf912888ca"}, 0x28) 00:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 00:57:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:57:13 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 00:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x2) 00:57:13 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 00:57:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) [ 802.404584] Bluetooth: hci4: command 0x0401 tx timeout [ 802.404617] Bluetooth: hci0: command 0x0401 tx timeout 00:57:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw/rawctl\x00', 0x101c00, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r3, 0x969b, 0x80000}) r4 = socket(0x21, 0x80000, 0x2) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "d58e2c71b0085cb7", "a527c9839b421497ac030e71cf65a9a8", "b9de9eb6", "fa34973da9ad2a8b"}, 0x28) 00:57:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 00:57:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x4) 00:57:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:14 executing program 0: r0 = socket(0x1f, 0x802, 0x401) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14000400ff02000000000000000000000000000105000200400000000500020000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4800}, 0x2400c004) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x400, 0x70bd27, 0x25dfdbfb, {0x16, 0x0, 0x2, 0xffffffffffffffff, 0x401, 0x3, 0xfff, 0xfeffff4a, 0x0, 0x1}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40800) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r4 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000040)) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000100)={0xfffeffff, 0x3}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x2, 0x1, {"21f18bcbb3e743fd529f848593f4fcd8"}, 0x6, 0x4, 0x1}}}, 0xa0) 00:57:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x2) 00:57:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:57:14 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 00:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x6) 00:57:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:57:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x4) 00:57:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw/rawctl\x00', 0x101c00, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r3, 0x969b, 0x80000}) r4 = socket(0x21, 0x80000, 0x2) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "d58e2c71b0085cb7", "a527c9839b421497ac030e71cf65a9a8", "b9de9eb6", "fa34973da9ad2a8b"}, 0x28) 00:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x8) 00:57:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 00:57:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x6) 00:57:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) [ 804.484388] Bluetooth: hci4: command 0x0401 tx timeout [ 804.484394] Bluetooth: hci0: command 0x0401 tx timeout 00:57:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x3, "52a01e", 0x6, 0xfe}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "77a72154c8975b89", "0b3482d91b2650164330bc9e38d0903162bc8077acd1588e83505a7d1f2296a0", "40999501", "d9e4c126691d9038"}, 0x38) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040), 0x4) 00:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xe) 00:57:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) socket(0x2b, 0x3, 0x3f) clock_gettime(0x3, &(0x7f0000000000)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, '\x00', 0x6}) 00:57:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 00:57:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw/rawctl\x00', 0x101c00, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r3, 0x969b, 0x80000}) socket(0x21, 0x80000, 0x2) 00:57:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 00:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xf) 00:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x60) 00:57:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 00:57:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 00:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xf0) 00:57:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) 00:57:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw/rawctl\x00', 0x101c00, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r3, 0x969b, 0x80000}) r4 = socket(0x21, 0x80000, 0x2) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "d58e2c71b0085cb7", "a527c9839b421497ac030e71cf65a9a8", "b9de9eb6", "fa34973da9ad2a8b"}, 0x28) 00:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x600) 00:57:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) pipe(&(0x7f0000000040)) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw/rawctl\x00', 0x101c00, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) socket(0x21, 0x80000, 0x2) 00:57:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000000)=""/254, &(0x7f0000000100)=0xfe) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xe00) 00:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xf00) 00:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x1caa) 00:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x6000) 00:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xaa1c) 00:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xf000) 00:57:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000280)="ce676fe13affdcd6a345a197c802ffbc8d454e9beeec76447a752239740d105e7d33e231f63b558496592098fccafb54d762553d2a2ab2fe5cb93c61e18e008ad2d32e61364ab5bb84f2344d5936dfa37a5f32f5f6149480a764370aab466809109b94adba253c43696222c426f83a7603df1be4258ea4cb816148bedc1116ddb91a75d0ecb7cd") ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) getuid() sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c080}, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000001c0)={0x5, 0x1, 0x3, 0x8, 0xb1ac}, 0x14) 00:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x34000) 00:57:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) pipe(&(0x7f0000000040)) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw/rawctl\x00', 0x101c00, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket(0x21, 0x80000, 0x2) 00:57:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x6000) 00:57:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x1, "b97829", 0x46}) 00:57:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) 00:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x400300) 00:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xf0ffff) [ 806.567750] Bluetooth: hci4: command 0x0401 tx timeout [ 806.574646] Bluetooth: hci0: command 0x0401 tx timeout 00:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x1000000) 00:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x2000000) 00:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x4000000) 00:57:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) socket(0x11dfef503d3d4a7b, 0xa, 0x2) 00:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x6000000) 00:57:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x400200, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf250200000008001700", @ANYRES32, @ANYBLOB="0c001600020000000000000008000b0003000000000000026b0000003300000083c73e08e01a1ddb2854a41d69a0b3237d75ce70bb0668a1025c8aae3616dca7392ddd6d8d7ecabd8b5c4d57048416fe00a26ec75cabfa17e35b72b44ad78acb663b040500000000000000000000004000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) write$bt_hci(r2, &(0x7f0000000100)={0x1, @le_set_cig_params={{0x2062, 0x3c}, {0x9, "bb357c", "beb9c6", 0x9, 0x2, 0xe9, 0x3f, 0x4, 0x5, [{0x0, 0x1, 0x2, 0x80, 0xff, 0x2, 0x4}, {0x2, 0x401, 0x1, 0x80, 0x1f, 0x8, 0x7}, {0x9, 0x100, 0x30f, 0x1f, 0xbd, 0x2, 0x40}, {0x2, 0xff38, 0x2, 0x3, 0xc3, 0x7, 0x4}, {0x81, 0xff, 0x3b, 0x1, 0x3, 0x66, 0x6}]}}}, 0x40) 00:57:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) pipe(&(0x7f0000000040)) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw/rawctl\x00', 0x101c00, 0x0) socket(0x21, 0x80000, 0x2) 00:57:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) pipe(&(0x7f0000000040)) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw/rawctl\x00', 0x101c00, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket(0x21, 0x80000, 0x2) 00:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x8000000) 00:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xe000000) 00:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xf000000) 00:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x60000000) 00:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x9effffff) 00:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xaa1c0000) 00:57:19 executing program 3: r0 = socket(0xb, 0x0, 0x67e) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0x1, &(0x7f0000000280)="d1b341084973d22e0e6abd9113386277c9a3edd52dc6bc2b96af66fc5b3d31eb9bf9d923d5d76afb6931b60e3b9a86a83864c8fe412da269b64d5acdef921e9a4f25bc67eb6468bc847c961c14161bfb9fc337f96b96f6c67b0316e75127513f6424343c81cb61230ca073d3afe4e2c1956afd88b84d17245b0823151b5d1955e342706ac515ceb40326fdf02bb9374a788851e9e99658a91700e18247704fdd80c5247a7e99dc1c1ea33032f8f62c4f72f46a4c303985760e53ffc63896ea176e19bc1c6ebe32b40bb09ef4b4787906469783be522cd06ff0eda55ec8fc49cb677e5ad405af48195b79996afdad795f69510be7f54e06301d349166e272797aabd1581c9ab3fcc0fdf99335b97020fb6a19055a8fd064e51016f6891033811ef4b0a26db5ed94d4a14bf2bd83fe43ac812383849d5d3a31f708cdb45f7ab338aaf848ffc648335f88e82793ac1d9b405937c67e9915384b14a14617fe375fefe0d9bd63539de6e28741431c292ec6433f64e6f1d4c3320489b8b36a63dc7e0dfafe1e55cb7cc8e96a23682dcfbcada7ce7b0b48cf8803a956dde0c8ea86ac4e7427d9f0d64505a4f6882f2fa41c75e41b0dbb316897f431e4319676bdb4f062b6176c30b1c007aebbbf37e050c2a3f9c7387f3723f8ac608c75a96f321d341fdc7fb41de1291cf839d92e7888492a16becb87ddfcf184fc04bf43d9b08167e47a946deb66601f8360b85f4f247c0c6710444b83410e517e89081cb15f28a8c59504f0fc3e96b99eb7d0319832496e40aa5d4f6e35323d790d693e44ffbd328e6c6b556645a88c896da96040d4f14730a3e588c19b8461030e09363f29f1146cf39b400ff26c4346b6d2335a4f60af2992cdaeea2a10c97c92ed3d9e5a5a1a613c1887bcc83ebe9c353fc7ee05e984b771c3fd5f826ee57f36c5f157c0ed57fccd8be3f7ad37458726edf9f4df05824c11ab214486cd0b80a70c6f8157f55bd9084f493dfdc9bb01d25804455b9f7586ccb49f247ec9e462b6ded5523d6918873c37a2454df1adaf868a65d4286a68ada72d689eb43ad333f91b5b76e9d726aadce3460676d80da3a034f23bcfddd1dad9e4e09d25ebd72ed75f7e97e60f947a81cc60b94173c25c2f27fdd02ad92fef5d19c342290e06a98b5c2efa947b14d6be0432551d7d4b98f3a6d43bf1791c9be077534bb44cd8aabefe1043b24d6bf302fc02237598455efda13ef0af4aec7e85f8f5d0e05751545dad5c448dd17ea4da353a63d7bee56ac784abc19c9e079b85c09d25190370b6a402f42668b8222fafbac2c4a8b6cd6d675e589e755b2eb134930a7c0ce58359296d04f72c3ff46225cf0f75e26caf93c1eb2899af1d399b3eee401d002fce45ba85c36721d9ac6f85eb0a6ba146b24f861f0ca50fea11e602487f71ce509b038d6652505bd5b8dcd5811e3fe3b9dec9bc294a00935fbb41b79715ae9e6b0af1d436abafefc03f88f14515925e2c9a93ee0e3fcf5a89095bb3000483b2edd34fd2d89730ee5ef80b6f1137a56c45073f82bad5b644be92d3a146e22e46a2794f58368084bd595e96304d63baacd4d038621d4d35c0bfb47b374e7f4332c616ce6719539e19580f828275f5346699f509248f458f8efc1228012aa370961538f2d405c9ab7ecf2c7407da26e3cda58ddd5f0543c817b0e9c515377b5e4809badc769e9d828f89c8224c75a3fce84f2c3a2c5dc75457dc688730d3b93985ace84281ff8983f4ca7e76b3c5aa095bbecc03858173c851a6911e32824a8cd986c5e8147776cd9266e7df72e53f2ca913d8c1f0865b3155de21ca88f6c5a40cef3a86d52caaa1f5ee39c39100d41278596cdc4ad97b064f64470c3d9169945b438e5172c3617d3872104692554651755f9d59da38adc09a560ca039d8afebdf3f79015ade31be8e6a696eb7e84d5907534519844b714f618f33377b10ea88a58302a798e0b53344543a36479808c0b6f42246f564ea7d7848486c9b45b81e436d428165538ad90ba3d2d02c3380c1eee1ae2b98a841ba259a6b0ceb5a25db30a64f4bdb7049f61582a3ecc1175bf0f68e68b87eb58f4dcc7b074d1a424583533aa38ae789a15525d68043bc6b3791f86a16afc72dc02621fb65043651eac40ccc75710679a7dc8173d540d8f546f343a7f42d476c16ec29c1171c727c624c122c6d022ff57e88714940479a986ba810bc83fb71fec55abe2f8977b2d11ed542469e26610e419de0fcd4ccf747fc0ada0d9214707f6970684a59138e12c714a211622bc02c8809955333e121571793a5bd09362aa5dec41e49ac2006cc96ebc411451a4f2ffb6010a118247c91a248b53f17f0b5d8af10bd4eafed364b1cbaae8944f51f8d95d8dc7054b87ed2ea24644aadc53b3a09ce989d7774170e62c66367310761182dfe1383319b594f14d1af00deb16829a509b5cafddb3a415a8db60d5ccfd1d153a8a5dcfe8ac31076ac1d4943c81a2c182f5137fe816e60dbcda7305debb590d83ef64d6f6cde5d35b76999a9d5774a42bf8d6b39ea7854548ffcfd836bcbe4efa575f1e3649116784b9c3f669a5ff649d664dad1711b53d2f154f9fe04fbfb81b9243da53d3c5ddb79940f4a23a8d5d69243711b074e42d4d691a0f6a68ce74cfbd7502acbf9cd3f70277ad253b21b5edde7b71ebcd7e7fc2482e043df62d446d4b2570d3d21dbde0f4431ee90f3cb364bc557ad55b6e625fe8b439089b41756e882cd9442427d9d92194ce31e2dcc4d2f2fe8118e902dbec963dd4b08a36cf99838010c2e5c64686a1aa981b652d3688f8e46baacab44d8ba55b2a777921e5de95df000457342021181d9535234bb4eccf1ee4999d07c2eb91a5fcaa91ba40623d323082bb5ee21c9af555bf593f64afdd961595bc70438655db9e58545c04057413057fb02d3444b1d64b501215a31bb217d3ffea6d79acc8640ca4d23004b6face41d8ddc52e5ca5c6ba9c531bb22a2b58a41dc8f2621e7460980519d4fb2580619b2f4fc9535177d86cd3d13a2d375bdee6c9d485b1a529d957d024830a3cf2728feb854438f0de006dbb5dd272f05033ccec00f3fb02055e3584f9e356916489924a59db3f0ff0b1e5801091d88bf33dce022550a923fa37c77a34bb5d5e28363c933e5a8c164876d1376ad813017e2e52213faf24f2c7c60c4d1e64e337831a66b363d4e8d8dfa6da25d50422e1a380ddd379190fdb19ac6ce72dfc9942a3c45a6c76cbaa09204c72505e325729ec14a98203a18b58531e15dbd0ec1f45d800afcb3abdcd6e8653c6b4dafeac9f6223f0b923c5c60fb587a3487d27403d7981f07030e1d83b716ca08e47a3b309da7ab658cedb8208cfab9565e550afa18f025f72039c4de8a81f0def89bdf0e3fc340042a485125321501f1982202484867a052feb3c1a7b691032fdcf8920707aaf9991a0c2635e406df0ad6b05fe15343a87a0a1deab944309f07002575c8ad8863a073e77189829f02c5e5e855195f0f5ea8daf0947ab9ba76cf29bfaa93bd9aa21fa11be2cd4444ca4c754bf456e36eef2344eed902945d6af0b89d1c99f9d0dffb221c634c19d18bf75774a62bb1e7cd5020b52e2216fd7ee4fb3f2cf9c3134ed337f52a84047050d0c872dcbdaba0ce78f485a282cf2fb398af90765083a43bb7a7f783972c9a0cb4fd6c0cd427e623857fd53e6de2d4accc68432141f4c6e1b9d87f3dd79e17e0732389805e04c1b0d61b7a0f82d0e256afea549f07d4794981be2572293b44667524b8dc37506f1b3c06fe8d9c4297cb0212f354be6ac6a69ef9d54d8d2ef75c5152dd4402b4ebc786766df1f1914fb0a43c92d20297dd858509313fd2ff4db0f0a44fd7cdcec63b589d081d8907086d3fd888bbcbd64e7bfbf0360be6174f3778185a637abbe5995b74e5abefad4a20802a9d7afa59203db033839ffa5777b5b98fed0633e192f48499d50d6358372a8c0074fd655f8dc8efa52a476ec69375222fb1150f7d27dc82b9dfb68f0c7183c67e4aa3f39f91c3e173e7d5cffe30f4857efec4ef81291071f5f6841192993d6a04409a260c34c45a160fd2ef08a8a21fac32d74c7e3a6ca825931fcfdb653ce65649fb1f1f4e59d010332f95b4b23f13bdab49fd88df75fc2c9bfb5a8e78afb4250e82d35a907aad78635f89f4bccb52d587f72b568aceaaad165904a4f8ff41cb8d0ee2a95f5153742f8d7eeb4ba50efa468debf2bcd4a5becd0fca54ef2ca88c845e16910fcb65a0ee2d4f9e08f90661dbd1043376a079aeb1ddc2781b7e1471aa626b24b47fb3679b1a8ff68d55f731897fcd3d029a47cd1d3de32af77eb6df04b5b4bb4533676c0a5e90035afc0f75558e5c75bd35a2e03aa501283d629fe1d945d2aa1f467e9d9badfad3d6bef91172a087628fb407d04de9692d6820ac229a97bdc06125328e58429de31e9094dfab6c4b0ed984e40f4532e9ed878d9e5fd92b9b5fcc0ea49d501724402c3604593306a6bfedc74d55b3b6ffc5674aefa434fccca2c3961df3b03327f59b2dad2131e3a9ba7d15fa82b7d0415ea1893495f7c8ebf23843a629eaedf71b846b23ca4beb12a359366cce84b15e6041fa8f62994e61643b3e93ca30f74b0ebb65516169bbaf86ac4bd2642e8b70e6690b0cf9b5993bcada15994ffc3f0bb9d56cd0f1b6ac1657eb3bf520598cacdea6319189048c16abc287a4790cef3c31dbe82305b6d1847bf79dd170899466987099d598302164aaf0b926d8eb20bc5060b57af9455401b7437abb63488b5b45f357e8978c6cfaa79f3fe78b6f4740e1e322af9a29cd7950b4e5be079cbb9ad40daa9009dc11ccd9d7c92a0e57b4f97c62a9bd5074e8a8c23c4ec78454df2396c4f3b44efc26a63783cf3a352a82b42fb9ecc8ed68247ef5b2358c1377c1c5c0320631edbb58f0de7ed82c0a54a7d9ea01c035666d4346265fe0693949bac95d576ac26cc56b0b60fc2947a0fd196511a055b73bac97d740d9386a2fc68b86c4bd6f8a60e33c1640015ac435c3b8802cb2bce193f1e1f0c69884c2b0a801e304b916385dff985676a83fb024aed878f783b42bd817ef7ed38067467288d6442c5e8474a764cd6294465c3ec09dd9326e9276fbb0693454db4b6a67d8b6ad99d8ce7427255bb078b636f7e2577ed781e89aeb8872165aaafd42e70d05c8537238609902b450dd89be831c51c9662cbef4d11d1fe69739868a0f7aaa64b358dc36de028b97954793c809baeb63314fb3fa54bd0526ef848935ec8a9f881e94af1d4f660f638526e4df1ae5c4e55515a5e351c7e5dd5a0767ca6262e8723c3e9460779f1f0e9208a31334037eba516efaf6935cc3f5736c2bf9274a7ffa56fcdecd5b8ff9ec37783a9bd7f62c1b63ed8022f16a90bc438df69355fbdd7c06041621b5e651d95cddd3280a3eaeac9da01c6870dce08449123bafac150e34d60d39b9f11317c5277853ba1114327769d4e4ff92afe5dd6314530fe018c16d4b0ec09c7a9e70b14aa5fe2ef1e5ba6417c2676e459e65ddd2720764f22c183ce42ab6281a2c758cfe2d066c85e6601af505844d20839eb885d558815b548cdb5dccc42f8ea6b55007fce477433653968470a83cec59fbd0eb97fed643c51e34ef8c94a7523d559293ea2b2875d3160fcf5f759240ff003831fe7699c4d9ed60a1f0e9b28ee1d0c1ee27e13f948d713f2636baf70934f094f63acbdf61fc87d39a7404bee947abc01c1aa4aec8627fa97d0b2b98b9247d6110b56eecd06409a4", &(0x7f0000000000)=@udp=r0, 0x4}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xf0ffffff) 00:57:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xf000000) 00:57:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) pipe(&(0x7f0000000040)) socket(0x21, 0x80000, 0x2) 00:57:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0xfe}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x61, 0x4) 00:57:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) socket(0x11dfef503d3d4a7b, 0xa, 0x2) 00:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xfffff000) 00:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xffffff7f) 00:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xffffff9e) 00:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xfffffff0) 00:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x40030000000000) [ 808.654130] Bluetooth: hci0: command 0x0401 tx timeout [ 808.661027] Bluetooth: hci4: command 0x0401 tx timeout 00:57:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x5, [0x5, 0x1], 0x4}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xf0ffffffffffff) 00:57:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) socket(0x21, 0x80000, 0x2) 00:57:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b9652b", 0x6}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000100)=0x4, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x8000, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x208000) socket$pppl2tp(0x18, 0x1, 0x1) 00:57:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6, 0xfe}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x61, 0x4) 00:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x100000000000000) 00:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x200000000000000) 00:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x400000000000000) 00:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x600000000000000) 00:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x800000000000000) 00:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xe00000000000000) 00:57:21 executing program 3: pipe(&(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x12d280, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:57:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xf00000000000000) 00:57:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x40440) socket(0x21, 0x80000, 0x2) 00:57:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept(r0, 0x0, &(0x7f0000000000)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97929", 0x6, 0x1}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0xc085) 00:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x6000000000000000) 00:57:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x3, "802000", 0x6}) 00:57:21 executing program 0: setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x10001, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x10, 0x70bd29, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x80c0) 00:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x9effffff00000000) 00:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xaa1c000000000000) 00:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xf0ffffff00000000) 00:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xffffff7f00000000) [ 810.724016] Bluetooth: hci4: command 0x0401 tx timeout [ 810.730628] Bluetooth: hci0: command 0x0401 tx timeout 00:57:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xfffffffffffff000) 00:57:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket$l2tp6(0xa, 0x2, 0x73) socket(0x21, 0x80000, 0x2) 00:57:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd27, 0x8, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:dmidecode_exec_t:s0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20008055) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0xdc8815922d17b331}, 0x14}}, 0x0) 00:57:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:22 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:22 executing program 3: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x0, [0x1f]}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:23 executing program 0: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000040)={0x45, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x4, 0x7, "6eff00", 0x6, 0x80}) 00:57:23 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)={'bond_slave_0\x00'}) 00:57:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0xf0ffffff00000000) 00:57:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) socket(0x21, 0x80000, 0x2) 00:57:23 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept(r0, 0x0, &(0x7f0000000000)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97929", 0x6, 0x1}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0xc085) 00:57:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xdc8815922d17b331}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4420000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x70, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @multicast2}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x70}}, 0x1) 00:57:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440)='/dev/input/mice\x00', 0x200040) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x16600, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x3, {0x1, 0x5, "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", 0x6, 0x1, 0x20, 0x0, 0x5, 0x0, 0x81}}}, 0x128) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x3, 0x401, "2f86d9", 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f}}, 0x20) 00:57:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x5, [0x5, 0x1], 0x4}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={0x0, 0x0, "b97829", 0x6}) 00:57:23 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x4, 0x2}}, 0x2e) 00:57:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}, r4}}, 0x38) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000540)={0x8, 0x120, 0xfa00, {0x2, {0x1, 0x2, "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", 0xfc, 0x2, 0x8, 0x81, 0x1, 0x1, 0x6}, r4}}, 0x128) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES32, @ANYBLOB="01000bbd7000fbdbdf2508"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40010) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfffa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="719087d451fb7524df25ab"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, [], 0x2e}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x48}}, 0x20000001) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000000)={0x78, r8, 0xdc8815922d17b331}, 0x14}, 0x1, 0x0, 0x0, 0x240840d1}, 0x0) [ 812.803828] Bluetooth: hci0: command 0x0401 tx timeout [ 812.810732] Bluetooth: hci4: command 0x0401 tx timeout [ 813.075105] ------------[ cut here ]------------ [ 813.081540] ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 [ 813.092749] WARNING: CPU: 0 PID: 12520 at lib/debugobjects.c:325 debug_print_object+0x160/0x250 [ 813.103224] Kernel panic - not syncing: panic_on_warn set ... [ 813.103224] [ 813.113157] CPU: 0 PID: 12520 Comm: syz-executor.5 Not tainted 4.19.172-syzkaller #0 [ 813.125018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.136686] Call Trace: [ 813.139412] dump_stack+0x1fc/0x2ef [ 813.143913] panic+0x26a/0x50e [ 813.147825] ? __warn_printk+0xf3/0xf3 [ 813.152731] ? debug_print_object+0x160/0x250 [ 813.158084] ? __probe_kernel_read+0x130/0x1b0 [ 813.163533] ? __warn.cold+0x5/0x5a [ 813.167531] ? debug_print_object+0x160/0x250 [ 813.173223] __warn.cold+0x20/0x5a [ 813.177688] ? debug_print_object+0x160/0x250 [ 813.183235] report_bug+0x262/0x2b0 [ 813.187046] do_error_trap+0x1d7/0x310 [ 813.191244] ? math_error+0x310/0x310 [ 813.197074] ? irq_work_claim+0xa6/0xc0 [ 813.201771] ? irq_work_queue+0x29/0x80 [ 813.206944] ? error_entry+0x72/0xd0 [ 813.210958] ? trace_hardirqs_off_caller+0x2c/0x210 [ 813.217048] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 813.222810] invalid_op+0x14/0x20 [ 813.227297] RIP: 0010:debug_print_object+0x160/0x250 [ 813.233405] Code: dd c0 cd b3 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd c0 cd b3 88 48 c7 c7 e0 c1 b3 88 e8 e5 04 7a 04 <0f> 0b 83 05 13 4e b1 07 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89 [ 813.255895] RSP: 0018:ffff888092d4f888 EFLAGS: 00010082 [ 813.262130] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 813.271027] RDX: 000000000001ab82 RSI: ffffffff814de0d1 RDI: ffffed10125a9f03 [ 813.279898] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 813.288137] R10: 0000000000000005 R11: ffffffff8c65d01b R12: ffffffff89f90880 [ 813.296638] R13: ffffffff8152f1f0 R14: ffff8880a66ed2d8 R15: dffffc0000000000 [ 813.305333] ? calc_wheel_index+0x230/0x230 [ 813.309863] ? vprintk_func+0x81/0x180 [ 813.314596] ? debug_print_object+0x160/0x250 [ 813.319371] ? __free_object+0xdd/0x1e0 [ 813.323693] debug_check_no_obj_freed+0x271/0x490 [ 813.329508] kfree+0xb9/0x210 [ 813.333124] ? __match_tty+0x90/0x90 [ 813.337543] bt_host_release+0x15/0x20 [ 813.342270] device_release+0x76/0x210 [ 813.346637] ? device_remove_bin_file+0x30/0x30 [ 813.351308] kobject_put+0x28b/0x5d0 [ 813.355441] put_device+0x1c/0x30 [ 813.359442] hci_inquiry+0x5af/0x920 [ 813.363294] ? hci_inquiry_cache_update_resolve+0x490/0x490 [ 813.369939] ? __local_bh_enable_ip+0x159/0x270 [ 813.375693] hci_sock_ioctl+0x1a7/0x7d0 [ 813.381165] ? hci_sock_release+0x590/0x590 [ 813.387506] ? wake_up_q+0x93/0xe0 [ 813.391591] ? drop_futex_key_refs+0x6f/0xe0 [ 813.396514] ? futex_wake+0x159/0x480 [ 813.400934] sock_do_ioctl+0xcb/0x2d0 [ 813.405130] ? compat_ifr_data_ioctl+0x150/0x150 [ 813.410069] ? __lock_acquire+0x6de/0x3ff0 [ 813.414962] ? debug_object_activate+0x12f/0x450 [ 813.419997] ? do_futex+0x163/0x18a0 [ 813.424391] sock_ioctl+0x2ef/0x5d0 [ 813.428740] ? dlci_ioctl_set+0x30/0x30 [ 813.433174] ? lock_downgrade+0x720/0x720 [ 813.437815] ? lock_acquire+0x170/0x3c0 [ 813.442905] ? debug_object_active_state+0x104/0x330 [ 813.449319] ? futex_exit_release+0x220/0x220 [ 813.454338] ? mark_held_locks+0xf0/0xf0 [ 813.459149] ? dlci_ioctl_set+0x30/0x30 [ 813.463308] do_vfs_ioctl+0xcdb/0x12e0 [ 813.468254] ? lock_downgrade+0x720/0x720 [ 813.473564] ? check_preemption_disabled+0x41/0x280 [ 813.479526] ? ioctl_preallocate+0x200/0x200 [ 813.484702] ? __fget+0x356/0x510 [ 813.488522] ? do_dup2+0x450/0x450 [ 813.492585] ? __se_sys_futex+0x298/0x3b0 [ 813.497531] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 813.503368] ksys_ioctl+0x9b/0xc0 [ 813.508399] __x64_sys_ioctl+0x6f/0xb0 [ 813.512592] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 813.517983] do_syscall_64+0xf9/0x620 [ 813.523098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 813.529166] RIP: 0033:0x465b09 [ 813.532722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.556582] RSP: 002b:00007f0f090f0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.564808] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 813.573627] RDX: 0000000020000240 RSI: 00000000800448f0 RDI: 0000000000000005 [ 813.582340] RBP: 00000000004b069f R08: 0000000000000000 R09: 0000000000000000 [ 813.590329] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 813.598436] R13: 00007ffd41950eff R14: 00007f0f090f0300 R15: 0000000000022000 [ 814.733215] Shutting down cpus with NMI [ 814.740892] Kernel Offset: disabled [ 814.745837] Rebooting in 86400 seconds..