0x7f0000001580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x70, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x70}}, 0x4040800) 18:07:19 executing program 5: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x70, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x70}}, 0x4040800) socket$inet6(0xa, 0x5, 0xb0b) 18:07:19 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:19 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:19 executing program 0: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x80901, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001740)) 18:07:19 executing program 2: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) 18:07:19 executing program 1: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x70, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x70}}, 0x4040800) socket$inet6(0xa, 0x5, 0xb0b) 18:07:20 executing program 5: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x70, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x70}}, 0x4040800) 18:07:20 executing program 0: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x80901, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001740)) 18:07:20 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:20 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:20 executing program 2: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) 18:07:20 executing program 1: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x70, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x70}}, 0x4040800) socket$inet6(0xa, 0x5, 0xb0b) 18:07:20 executing program 5: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) 18:07:20 executing program 0: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x80901, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001740)) 18:07:20 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97}) 18:07:20 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97}) 18:07:20 executing program 2: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) 18:07:20 executing program 1: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x70, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x70}}, 0x4040800) socket$inet6(0xa, 0x5, 0xb0b) 18:07:20 executing program 5: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) 18:07:20 executing program 0: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x80901, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001740)) 18:07:20 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) 18:07:20 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) 18:07:20 executing program 2: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) 18:07:20 executing program 5: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x200000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) 18:07:20 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:20 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') 18:07:20 executing program 0: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x80901, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001740)) 18:07:20 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') 18:07:21 executing program 2: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) 18:07:21 executing program 5: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x81, 0x0, {0x4e24, 0x4e24, [0x1, 0x0, 0xff, 0x3], [0x0, 0x7, 0x2, 0x80000000]}, 0x10000000, 0xfffff001}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1bdd7c5c542cc611d93f1d324f5af73cfa12f0ec695a62b15265372e50792e641197a917f5bb5561d6733b500ec9dd84bd543082d15fac2c0c033fd199af8c3d59bfa4ea32"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "00face8696f1f334b891187acf9c444f1710cd9e2e881814d345693fc0864ed33188e31d02a64f2221551c3f38a7a6519a139be07effb2026c6a8b29abd4c8ef6128974d6a49a87fb207631a58e560ec9736d9483270a7e86ee6ddb6c99666cb7b9606b197a0fa5ef9cec996264436d9baa4a0777fde9155bb2405a8af078c7081484479f222baa77ca727af040ac676555266d02177eef0354d533d3bf1184a924256f742a510261009634ff635a13e6cc44396e8fbb235e4de04b8d08633110b03ac3989414c69426d8457d78641fa0095812c945f2c81"}]}, 0x174}, 0x1, 0x0, 0x0, 0x20049081}, 0x800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) 18:07:21 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:21 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) 18:07:21 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) 18:07:21 executing program 0: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x80901, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001740)) 18:07:21 executing program 2: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) 18:07:21 executing program 5: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000040)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) 18:07:21 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:21 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') 18:07:21 executing program 5: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) 18:07:21 executing program 0: ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x80901, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001740)) 18:07:21 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') 18:07:21 executing program 2: accept(0xffffffffffffffff, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80) 18:07:21 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) 18:07:21 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97}) 18:07:21 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x80901, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001740)) 18:07:21 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x400080, 0x0) 18:07:21 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) 18:07:21 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) 18:07:21 executing program 2: accept(0xffffffffffffffff, 0x0, &(0x7f0000001480)) 18:07:21 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) 18:07:21 executing program 5: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x400080, 0x0) 18:07:21 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x80901, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001740)) 18:07:22 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) 18:07:22 executing program 2: accept(0xffffffffffffffff, 0x0, 0x0) 18:07:22 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) 18:07:22 executing program 5: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:07:22 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') 18:07:22 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x80901, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001740)) 18:07:22 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) 18:07:22 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) 18:07:22 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) socket(0x6, 0x6, 0x100) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) socket(0x1e, 0x5, 0x8) 18:07:22 executing program 5: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:07:22 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x80901, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001740)) 18:07:22 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) 18:07:22 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:22 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) socket(0x6, 0x6, 0x100) socket(0x1e, 0x5, 0x8) 18:07:22 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:22 executing program 5: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:07:22 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001740)) 18:07:22 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:22 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') 18:07:22 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) socket(0x1e, 0x5, 0x8) 18:07:22 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:22 executing program 5: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:07:22 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000001740)) 18:07:23 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) 18:07:23 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:23 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) socket(0x1e, 0x5, 0x8) 18:07:23 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:23 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000001740)) 18:07:23 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') 18:07:23 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) 18:07:23 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) socket(0x1e, 0x5, 0x8) 18:07:23 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:23 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:23 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97}) 18:07:23 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000001740)) 18:07:23 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) 18:07:23 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) socket(0x1e, 0x5, 0x8) 18:07:23 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:23 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, 0x0) 18:07:23 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) 18:07:23 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:23 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:23 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) socket(0x1e, 0x5, 0x8) 18:07:23 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:23 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:23 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') 18:07:24 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:24 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) socket(0x6, 0x6, 0x100) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) 18:07:24 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:24 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x1e, 0x5, 0x8) 18:07:24 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) socket(0x6, 0x6, 0x100) 18:07:24 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:24 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) 18:07:24 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97}) 18:07:24 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:24 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket(0x1e, 0x5, 0x8) 18:07:24 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) socket(0x6, 0x6, 0x100) 18:07:24 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:24 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') 18:07:24 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:24 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) 18:07:24 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) socket(0x1e, 0x5, 0x8) 18:07:24 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) socket(0x6, 0x6, 0x100) 18:07:24 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') 18:07:24 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) 18:07:24 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:24 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:24 executing program 4: socket(0x1e, 0x5, 0x8) 18:07:24 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) 18:07:24 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) socket(0x6, 0x6, 0x100) 18:07:25 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) 18:07:25 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') 18:07:25 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) socket(0x6, 0x6, 0x100) 18:07:25 executing program 4: socket(0x0, 0x5, 0x8) 18:07:25 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:25 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000b00)={r7}) 18:07:25 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) 18:07:25 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:25 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) 18:07:25 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x6, 0x6, 0x100) 18:07:25 executing program 4: socket(0x0, 0x5, 0x8) 18:07:25 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97}) 18:07:25 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:25 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) 18:07:25 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:25 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket(0x6, 0x6, 0x100) 18:07:25 executing program 4: socket(0x0, 0x5, 0x8) 18:07:25 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) socket(0x6, 0x6, 0x100) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) 18:07:25 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) 18:07:25 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) 18:07:25 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) socket(0x6, 0x6, 0x100) 18:07:25 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:26 executing program 4: socket(0x1e, 0x0, 0x8) 18:07:26 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) socket(0x6, 0x6, 0x100) 18:07:26 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') 18:07:26 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:26 executing program 1: socket(0x6, 0x6, 0x100) 18:07:26 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:26 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) 18:07:26 executing program 4: socket(0x1e, 0x0, 0x0) 18:07:26 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) 18:07:26 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:26 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) socket(0x6, 0x6, 0x100) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) 18:07:26 executing program 1: socket(0x0, 0x6, 0x100) 18:07:26 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) 18:07:26 executing program 4: socket(0x1e, 0x0, 0x0) 18:07:26 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') 18:07:26 executing program 1: socket(0x0, 0x6, 0x100) 18:07:26 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) socket(0x6, 0x6, 0x100) 18:07:26 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:26 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) 18:07:26 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) 18:07:26 executing program 4: socket(0x1e, 0x0, 0x0) 18:07:27 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) 18:07:27 executing program 1: socket(0x0, 0x6, 0x100) 18:07:27 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:27 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) 18:07:27 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) 18:07:27 executing program 4: socket(0x1e, 0x0, 0x0) 18:07:27 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:27 executing program 1: socket(0x6, 0x0, 0x100) 18:07:27 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:27 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) 18:07:27 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) 18:07:27 executing program 4: socket(0x1e, 0x0, 0x0) 18:07:27 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, 0x0, 0x0) 18:07:27 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) 18:07:27 executing program 1: socket(0x6, 0x0, 0x0) 18:07:27 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:27 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) 18:07:27 executing program 4: socket(0x1e, 0x0, 0x0) 18:07:27 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) 18:07:27 executing program 1: socket(0x1e, 0x0, 0x0) 18:07:27 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) socket(0x6, 0x6, 0x100) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) 18:07:27 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:27 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) 18:07:27 executing program 4: socket(0x0, 0x0, 0x0) 18:07:28 executing program 1: socket(0x1e, 0x0, 0x0) 18:07:28 executing program 2: recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) 18:07:28 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') 18:07:28 executing program 4: socket(0x0, 0x0, 0x0) 18:07:28 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) socket(0x6, 0x6, 0x100) 18:07:28 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:28 executing program 1: socket(0x1e, 0x0, 0x0) 18:07:28 executing program 2: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) 18:07:28 executing program 4: socket(0x0, 0x0, 0x0) 18:07:28 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) 18:07:28 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) 18:07:28 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:28 executing program 1: socket(0x0, 0x0, 0x0) 18:07:28 executing program 2: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) 18:07:28 executing program 4: socket(0x0, 0x0, 0x0) 18:07:28 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:28 executing program 2: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:07:28 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:28 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:28 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) 18:07:28 executing program 1: socket(0x0, 0x0, 0x0) 18:07:28 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) socket(0x1e, 0x5, 0x8) 18:07:28 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:29 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') 18:07:29 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) 18:07:29 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) 18:07:29 executing program 1: socket(0x0, 0x0, 0x0) 18:07:29 executing program 5: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:29 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:29 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) 18:07:29 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') 18:07:29 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) 18:07:29 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:29 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97}) 18:07:29 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x2000, &(0x7f0000000440)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x6, 0x6, 0x100) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r3 = socket(0x1e, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x214, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600040c8}, 0x44084) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40)='nbd\x00') openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dri/renderD128\x00', 0x900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0x1, 0x6, 0xc97}) 18:07:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:29 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) 18:07:29 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:29 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:29 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) 18:07:30 executing program 1: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) 18:07:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:30 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:30 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)) getuid() 18:07:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:30 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:30 executing program 0: getuid() 18:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) 18:07:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:30 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:30 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:30 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) socket$nl_generic(0x10, 0x3, 0x10) 18:07:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x1d1d38742332c785, 0x0) 18:07:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) 18:07:30 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:30 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:30 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) 18:07:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) 18:07:31 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) socket$nl_generic(0x10, 0x3, 0x10) 18:07:31 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:31 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 18:07:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) socket$nl_generic(0x10, 0x3, 0x10) 18:07:31 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) 18:07:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) 18:07:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) 18:07:31 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) 18:07:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 18:07:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 18:07:31 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:31 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 18:07:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) 18:07:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) 18:07:32 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:32 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 18:07:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) 18:07:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) 18:07:32 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) 18:07:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) 18:07:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 18:07:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) 18:07:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) pkey_alloc(0x0, 0x2) 18:07:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) 18:07:32 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) 18:07:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) 18:07:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) pkey_alloc(0x0, 0x2) 18:07:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) 18:07:32 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) 18:07:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) 18:07:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) 18:07:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) pkey_alloc(0x0, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x20100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001080)={[{0x2, 0x2e3, 0x1f, 0x3f, 0x23, 0xc1, 0x1, 0xc1, 0x30, 0x15, 0x0, 0x6, 0xef0}, {0x0, 0x4, 0x0, 0x20, 0x7, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x0, 0x9}, {0xeb1, 0x3ff, 0x44, 0x2, 0xf9, 0x9, 0x0, 0xff, 0xff, 0x2, 0x4, 0x9, 0x100}], 0x7f}) socket$nl_generic(0x10, 0x3, 0x10) 18:07:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) pkey_alloc(0x0, 0x2) 18:07:32 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 18:07:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 18:07:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) 18:07:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) pkey_alloc(0x0, 0x2) 18:07:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) pkey_alloc(0x0, 0x2) 18:07:33 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) 18:07:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) pkey_alloc(0x0, 0x2) 18:07:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer2\x00', 0x800, 0x0) 18:07:33 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x3c, 0x80000, 0x9) pkey_alloc(0x0, 0x2) 18:07:33 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)=0xf644) 18:07:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) 18:07:33 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) 18:07:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) pkey_alloc(0x0, 0x2) 18:07:33 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:33 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) 18:07:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) 18:07:33 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) pkey_alloc(0x0, 0x2) 18:07:34 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:34 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x3c, 0x80000, 0x9) 18:07:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) 18:07:34 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:34 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:34 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) pkey_alloc(0x0, 0x2) 18:07:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket(0x3c, 0x80000, 0x9) 18:07:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) 18:07:34 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) 18:07:34 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) pkey_alloc(0x0, 0x2) 18:07:34 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)) 18:07:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) socket(0x3c, 0x80000, 0x9) 18:07:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) 18:07:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) pkey_alloc(0x0, 0x2) 18:07:34 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:34 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) pkey_alloc(0x0, 0x2) 18:07:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) socket(0x3c, 0x80000, 0x9) 18:07:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) 18:07:34 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) pkey_alloc(0x0, 0x2) 18:07:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) socket(0x3c, 0x80000, 0x9) 18:07:35 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:35 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) socket(0x3c, 0x80000, 0x9) 18:07:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) 18:07:35 executing program 4: pkey_alloc(0x0, 0x2) 18:07:35 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:35 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:35 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) socket(0x28, 0x6, 0x7) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) 18:07:35 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket(0x3c, 0x80000, 0x9) 18:07:35 executing program 4: pkey_alloc(0x0, 0x0) 18:07:35 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) socket(0x28, 0x6, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:35 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) 18:07:35 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:35 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:35 executing program 3: socket(0x3c, 0x80000, 0x9) 18:07:35 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:35 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:35 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:35 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) 18:07:35 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:36 executing program 3: socket(0x0, 0x80000, 0x9) 18:07:36 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:36 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 18:07:36 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:36 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:36 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:36 executing program 3: socket(0x0, 0x80000, 0x9) 18:07:36 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:36 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 18:07:36 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:36 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:36 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:36 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:36 executing program 3: socket(0x0, 0x80000, 0x9) 18:07:36 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 18:07:36 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:36 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:36 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:36 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:36 executing program 3: socket(0x3c, 0x0, 0x9) 18:07:36 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:36 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:36 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 18:07:37 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:37 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:37 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:37 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 18:07:37 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:37 executing program 3: socket(0x3c, 0x0, 0x0) 18:07:37 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:37 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:37 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:37 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:37 executing program 2: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 18:07:37 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:37 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:37 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:37 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 18:07:37 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:37 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:37 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:37 executing program 3: socket(0x0, 0x80000, 0x9) 18:07:37 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:37 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:37 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:37 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 18:07:38 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:38 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:38 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:38 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:38 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 18:07:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 18:07:38 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:38 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:38 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:38 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:38 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 18:07:38 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:38 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:38 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:38 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:38 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:38 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 18:07:38 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:38 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:38 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:38 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:38 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) 18:07:38 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:39 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:39 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:39 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:39 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:39 executing program 1: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:39 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:39 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:39 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:39 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) 18:07:39 executing program 1: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:39 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:39 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:39 executing program 4: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:39 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:39 executing program 1: syz_emit_vhci(0x0, 0x0) 18:07:39 executing program 5: socket$inet_sctp(0x2, 0x0, 0x84) 18:07:39 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:39 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:39 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:39 executing program 4: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:39 executing program 1: syz_emit_vhci(0x0, 0x0) 18:07:39 executing program 2: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:39 executing program 5: socket$inet_sctp(0x2, 0x0, 0x84) 18:07:40 executing program 4: syz_emit_vhci(0x0, 0x0) 18:07:40 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:40 executing program 3: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:40 executing program 1: syz_emit_vhci(0x0, 0x0) 18:07:40 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) 18:07:40 executing program 5: socket$inet_sctp(0x2, 0x0, 0x84) 18:07:40 executing program 4: syz_emit_vhci(0x0, 0x0) 18:07:40 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:40 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) 18:07:40 executing program 1: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:40 executing program 2: socket$inet_sctp(0x2, 0x0, 0x84) [ 251.816066][ T8496] Bluetooth: hci1: SCO packet for unknown connection handle 0 18:07:40 executing program 4: syz_emit_vhci(0x0, 0x0) 18:07:40 executing program 1: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) 18:07:40 executing program 5: socket$inet_sctp(0x2, 0x0, 0x84) 18:07:40 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:40 executing program 3: socket$inet_sctp(0x2, 0x0, 0x84) [ 252.062580][ T8496] Bluetooth: hci1: SCO packet for unknown connection handle 0 18:07:40 executing program 4: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:40 executing program 2: socket$inet_sctp(0x2, 0x0, 0x84) 18:07:40 executing program 1: syz_emit_vhci(0x0, 0x0) 18:07:40 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:40 executing program 5: socket$inet_sctp(0x2, 0x0, 0x84) [ 252.275953][ T8496] Bluetooth: hci4: SCO packet for unknown connection handle 0 18:07:41 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:41 executing program 3: socket$inet_sctp(0x2, 0x0, 0x84) 18:07:41 executing program 4: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) 18:07:41 executing program 2: socket$inet_sctp(0x2, 0x0, 0x84) 18:07:41 executing program 1: syz_emit_vhci(0x0, 0x0) 18:07:41 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:41 executing program 5: socket$inet_sctp(0x2, 0x0, 0x84) [ 252.590997][ T8496] Bluetooth: hci4: SCO packet for unknown connection handle 0 18:07:41 executing program 3: socket$inet_sctp(0x2, 0x0, 0x84) 18:07:41 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:41 executing program 1: syz_emit_vhci(0x0, 0x0) 18:07:41 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:41 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:41 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @empty}, &(0x7f0000000e00)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3c, 0x80000, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000e40)={0x7}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer\x00', 0x840, 0x0) 18:07:41 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:41 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:41 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:41 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:41 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:41 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:41 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:41 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:42 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:42 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:42 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:42 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:42 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:42 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:42 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:42 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:42 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:42 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:42 executing program 0: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:42 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:42 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:42 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:42 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:42 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:42 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:42 executing program 2: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:42 executing program 0: syz_emit_vhci(0x0, 0x0) 18:07:42 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) 18:07:42 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) 18:07:42 executing program 0: syz_emit_vhci(0x0, 0x0) 18:07:42 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:42 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) 18:07:42 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) 18:07:42 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:43 executing program 0: syz_emit_vhci(0x0, 0x0) 18:07:43 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:43 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) 18:07:43 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:43 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:43 executing program 2: syz_emit_vhci(0x0, 0x0) 18:07:43 executing program 0: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:43 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) 18:07:43 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) 18:07:43 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:43 executing program 2: syz_emit_vhci(0x0, 0x0) 18:07:43 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) 18:07:43 executing program 0: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) [ 254.882429][ T8496] Bluetooth: hci0: SCO packet for unknown connection handle 0 18:07:43 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:43 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:43 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:43 executing program 0: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) 18:07:43 executing program 2: syz_emit_vhci(0x0, 0x0) [ 255.058632][ T8496] Bluetooth: hci0: SCO packet for unknown connection handle 0 18:07:43 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:43 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) socket(0x28, 0x6, 0x7) 18:07:43 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) [ 255.264938][ T8496] Bluetooth: hci0: SCO packet for unknown connection handle 0 18:07:44 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) 18:07:44 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) socket(0x28, 0x6, 0x7) 18:07:44 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:44 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:44 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) socket(0x28, 0x6, 0x7) 18:07:44 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) [ 255.586480][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:07:44 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) 18:07:44 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) socket(0x28, 0x6, 0x7) 18:07:44 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) 18:07:44 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:44 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:44 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:44 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) socket(0x28, 0x6, 0x7) [ 255.830796][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:07:44 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:44 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:44 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) socket(0x28, 0x6, 0x7) 18:07:44 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:44 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) socket(0x28, 0x6, 0x7) 18:07:44 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:44 executing program 0: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:44 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:44 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) socket(0x28, 0x6, 0x7) 18:07:44 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:45 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:45 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) [ 256.351442][ T8496] Bluetooth: hci0: SCO packet for unknown connection handle 0 18:07:45 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:45 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:45 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:45 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) socket(0x28, 0x6, 0x7) 18:07:45 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:45 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:45 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:45 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:45 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) socket(0x28, 0x6, 0x7) 18:07:45 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:45 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) 18:07:45 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:45 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:45 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:45 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:45 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) socket(0x28, 0x6, 0x7) 18:07:45 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:45 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:45 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:45 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:45 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:45 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) socket(0x28, 0x6, 0x7) 18:07:46 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:46 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:46 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:46 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:46 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:46 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x6, 0x7) 18:07:46 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) 18:07:46 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:46 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:46 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) 18:07:46 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:46 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket(0x28, 0x6, 0x7) 18:07:46 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:46 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:46 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:46 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:46 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:46 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x28, 0x6, 0x7) 18:07:46 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:46 executing program 3: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:46 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:46 executing program 4: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:46 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:47 executing program 3: sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:47 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket(0x28, 0x6, 0x7) 18:07:47 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) 18:07:47 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:47 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) 18:07:47 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:47 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:47 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) socket(0x28, 0x6, 0x7) 18:07:47 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:47 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:07:47 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:47 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:47 executing program 5: socket(0x28, 0x6, 0x7) 18:07:47 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:47 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:47 executing program 4 (fault-call:0 fault-nth:0): write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:07:47 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:07:47 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:47 executing program 5: socket(0x0, 0x6, 0x7) 18:07:47 executing program 1: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) [ 259.097743][T17609] FAULT_INJECTION: forcing a failure. [ 259.097743][T17609] name fail_usercopy, interval 1, probability 0, space 0, times 1 18:07:47 executing program 2 (fault-call:0 fault-nth:0): syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) [ 259.161622][T17609] CPU: 1 PID: 17609 Comm: syz-executor.4 Not tainted 5.11.0-rc2-syzkaller #0 [ 259.170451][T17609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.180529][T17609] Call Trace: [ 259.183835][T17609] dump_stack+0x107/0x163 [ 259.188268][T17609] should_fail.cold+0x5/0xa [ 259.192843][T17609] _copy_to_user+0x2c/0x150 [ 259.197482][T17609] simple_read_from_buffer+0xcc/0x160 [ 259.202944][T17609] proc_fail_nth_read+0x187/0x220 [ 259.208033][T17609] ? proc_exe_link+0x1d0/0x1d0 [ 259.212827][T17609] ? security_file_permission+0x248/0x560 [ 259.218787][T17609] ? proc_exe_link+0x1d0/0x1d0 [ 259.223590][T17609] vfs_read+0x1b5/0x570 [ 259.227872][T17609] ksys_read+0x12d/0x250 [ 259.232157][T17609] ? vfs_write+0xa30/0xa30 [ 259.236612][T17609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 259.242672][T17609] do_syscall_64+0x2d/0x70 [ 259.243944][T17618] FAULT_INJECTION: forcing a failure. [ 259.243944][T17618] name failslab, interval 1, probability 0, space 0, times 1 [ 259.247117][T17609] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 259.265674][T17609] RIP: 0033:0x417b11 [ 259.269575][T17609] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 259.289190][T17609] RSP: 002b:00007f597e6c2c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 259.297627][T17609] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417b11 [ 259.305620][T17609] RDX: 000000000000000f RSI: 00007f597e6c2cb0 RDI: 0000000000000003 [ 259.313588][T17609] RBP: 00007f597e6c2ca0 R08: 0000000000000000 R09: 0000000000000000 [ 259.321565][T17609] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 259.329545][T17609] R13: 00007fffc74ae7af R14: 00007f597e6c39c0 R15: 000000000119bf8c [ 259.337554][T17618] CPU: 0 PID: 17618 Comm: syz-executor.2 Not tainted 5.11.0-rc2-syzkaller #0 [ 259.346341][T17618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.356417][T17618] Call Trace: [ 259.359715][T17618] dump_stack+0x107/0x163 [ 259.364081][T17618] should_fail.cold+0x5/0xa [ 259.368617][T17618] should_failslab+0x5/0x10 [ 259.373309][T17618] kmem_cache_alloc_node+0x63/0x4e0 [ 259.378628][T17618] __alloc_skb+0x71/0x5a0 [ 259.383041][T17618] vhci_write+0xbd/0x450 [ 259.387407][T17618] new_sync_write+0x426/0x650 [ 259.392106][T17618] ? new_sync_read+0x6e0/0x6e0 [ 259.396895][T17618] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 259.403264][T17618] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 259.409011][T17618] ? selinux_file_permission+0x92/0x520 [ 259.414689][T17618] vfs_write+0x791/0xa30 [ 259.418965][T17618] ksys_write+0x12d/0x250 [ 259.423319][T17618] ? __ia32_sys_read+0xb0/0xb0 [ 259.428125][T17618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 259.434054][T17618] do_syscall_64+0x2d/0x70 [ 259.438497][T17618] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 259.444420][T17618] RIP: 0033:0x417ab1 [ 259.448331][T17618] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 259.467966][T17618] RSP: 002b:00007efe42079c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 259.476419][T17618] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417ab1 [ 259.484415][T17618] RDX: 0000000000000004 RSI: 00000000200007c0 RDI: 00000000000000f1 [ 259.492410][T17618] RBP: 00007efe42079ca0 R08: 0000000000000000 R09: 0000000000000000 [ 259.500406][T17618] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000 18:07:48 executing program 3 (fault-call:0 fault-nth:0): sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 259.508415][T17618] R13: 00007fffce5a770f R14: 00007efe4207a9c0 R15: 000000000119bf8c 18:07:48 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 18:07:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) [ 259.598469][T17626] FAULT_INJECTION: forcing a failure. [ 259.598469][T17626] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 259.635130][T17626] CPU: 0 PID: 17626 Comm: syz-executor.3 Not tainted 5.11.0-rc2-syzkaller #0 [ 259.644062][T17626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.654144][T17626] Call Trace: [ 259.657444][T17626] dump_stack+0x107/0x163 [ 259.661806][T17626] should_fail.cold+0x5/0xa [ 259.666354][T17626] _copy_to_user+0x2c/0x150 [ 259.670902][T17626] simple_read_from_buffer+0xcc/0x160 [ 259.676317][T17626] proc_fail_nth_read+0x187/0x220 [ 259.681374][T17626] ? proc_exe_link+0x1d0/0x1d0 [ 259.686161][T17626] ? security_file_permission+0x248/0x560 [ 259.691946][T17626] ? proc_exe_link+0x1d0/0x1d0 [ 259.696739][T17626] vfs_read+0x1b5/0x570 [ 259.700921][T17626] ksys_read+0x12d/0x250 [ 259.705187][T17626] ? vfs_write+0xa30/0xa30 [ 259.709638][T17626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 259.715569][T17626] do_syscall_64+0x2d/0x70 [ 259.720007][T17626] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 259.725927][T17626] RIP: 0033:0x417b11 18:07:48 executing program 5: socket(0x0, 0x6, 0x7) [ 259.729832][T17626] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 259.749460][T17626] RSP: 002b:00007fea07a30c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 259.757898][T17626] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417b11 [ 259.765921][T17626] RDX: 000000000000000f RSI: 00007fea07a30cb0 RDI: 0000000000000003 [ 259.773932][T17626] RBP: 00007fea07a30ca0 R08: 0000000000000000 R09: 0000000000000000 [ 259.781930][T17626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 259.789947][T17626] R13: 00007ffe4a5a41df R14: 00007fea07a319c0 R15: 000000000119bf8c 18:07:48 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:48 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:07:48 executing program 5: socket(0x0, 0x6, 0x7) 18:07:48 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:48 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:07:48 executing program 2 (fault-call:0 fault-nth:1): syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) 18:07:48 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) 18:07:48 executing program 5: socket(0x28, 0x0, 0x7) 18:07:48 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:48 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x7) [ 260.215559][T17648] FAULT_INJECTION: forcing a failure. [ 260.215559][T17648] name failslab, interval 1, probability 0, space 0, times 0 [ 260.244780][T17648] CPU: 1 PID: 17648 Comm: syz-executor.2 Not tainted 5.11.0-rc2-syzkaller #0 [ 260.253638][T17648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.263693][T17648] Call Trace: [ 260.266963][T17648] dump_stack+0x107/0x163 [ 260.271312][T17648] should_fail.cold+0x5/0xa [ 260.276337][T17648] should_failslab+0x5/0x10 [ 260.280839][T17648] kmem_cache_alloc_node_trace+0x69/0x520 [ 260.286560][T17648] ? rcu_read_lock_sched_held+0x3a/0x70 [ 260.292179][T17648] ? kmem_cache_alloc_node+0x3e7/0x4e0 [ 260.297650][T17648] __kmalloc_node_track_caller+0x38/0x60 [ 260.303280][T17648] __alloc_skb+0xae/0x5a0 [ 260.307624][T17648] vhci_write+0xbd/0x450 [ 260.311887][T17648] new_sync_write+0x426/0x650 [ 260.316585][T17648] ? new_sync_read+0x6e0/0x6e0 [ 260.321354][T17648] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 260.327603][T17648] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 260.333334][T17648] ? selinux_file_permission+0x92/0x520 [ 260.338894][T17648] vfs_write+0x791/0xa30 [ 260.343133][T17648] ksys_write+0x12d/0x250 [ 260.347454][T17648] ? __ia32_sys_read+0xb0/0xb0 [ 260.352222][T17648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 260.358123][T17648] do_syscall_64+0x2d/0x70 [ 260.362570][T17648] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 260.368464][T17648] RIP: 0033:0x417ab1 [ 260.372354][T17648] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 260.391953][T17648] RSP: 002b:00007efe42079c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 260.400370][T17648] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417ab1 [ 260.408353][T17648] RDX: 0000000000000004 RSI: 00000000200007c0 RDI: 00000000000000f1 18:07:49 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x0) [ 260.416315][T17648] RBP: 00007efe42079ca0 R08: 0000000000000000 R09: 0000000000000000 [ 260.424275][T17648] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001 [ 260.432246][T17648] R13: 00007fffce5a770f R14: 00007efe4207a9c0 R15: 000000000119bf8c 18:07:49 executing program 2 (fault-call:0 fault-nth:2): syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) 18:07:49 executing program 5: socket(0x28, 0x0, 0x0) 18:07:49 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:49 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x700) 18:07:49 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x700, 0x0, 0x0, 0x0) 18:07:49 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) [ 260.710782][T17661] FAULT_INJECTION: forcing a failure. [ 260.710782][T17661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.761727][T17661] CPU: 0 PID: 17661 Comm: syz-executor.2 Not tainted 5.11.0-rc2-syzkaller #0 [ 260.770564][T17661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.780645][T17661] Call Trace: [ 260.783938][T17661] dump_stack+0x107/0x163 [ 260.788382][T17661] should_fail.cold+0x5/0xa [ 260.792920][T17661] _copy_from_iter_full+0x1fa/0x850 [ 260.798144][T17661] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 260.804416][T17661] ? __phys_addr_symbol+0x2c/0x70 18:07:49 executing program 5: socket(0x28, 0x0, 0x0) [ 260.809543][T17661] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 260.815288][T17661] ? __check_object_size+0x171/0x3f0 [ 260.820660][T17661] vhci_write+0x14f/0x450 [ 260.825017][T17661] new_sync_write+0x426/0x650 [ 260.829714][T17661] ? new_sync_read+0x6e0/0x6e0 [ 260.834501][T17661] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 260.840776][T17661] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 260.846522][T17661] ? selinux_file_permission+0x92/0x520 [ 260.852116][T17661] vfs_write+0x791/0xa30 [ 260.856386][T17661] ksys_write+0x12d/0x250 18:07:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000600)) [ 260.860732][T17661] ? __ia32_sys_read+0xb0/0xb0 [ 260.865514][T17661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 260.871438][T17661] do_syscall_64+0x2d/0x70 [ 260.875876][T17661] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 260.881796][T17661] RIP: 0033:0x417ab1 [ 260.885729][T17661] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 18:07:49 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x7000000, 0x0, 0x0, 0x0) [ 260.905369][T17661] RSP: 002b:00007efe42079c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 260.913810][T17661] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417ab1 [ 260.921809][T17661] RDX: 0000000000000004 RSI: 00000000200007c0 RDI: 00000000000000f1 [ 260.929818][T17661] RBP: 00007efe42079ca0 R08: 0000000000000000 R09: 0000000000000000 [ 260.937808][T17661] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000002 [ 260.945794][T17661] R13: 00007fffce5a770f R14: 00007efe4207a9c0 R15: 000000000119bf8c 18:07:49 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x7000000) 18:07:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 18:07:49 executing program 5: socket(0x28, 0x0, 0x0) 18:07:50 executing program 2 (fault-call:0 fault-nth:3): syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) 18:07:50 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) 18:07:50 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) 18:07:50 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x700000000000000) 18:07:50 executing program 1: socket(0x28, 0x0, 0x0) 18:07:50 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:50 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0xf0ffffff7f0000, 0x0, 0x0, 0x0) 18:07:50 executing program 4: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002ec13267000fedbdf25080000000c000f00fbffffffffffffff0c00160007000000000000000500210000000000356b25440fe37629e392dc782ed79605000d000100000005000400040000fa1acd10aaab680414000800"], 0x58}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8010) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:07:50 executing program 1: socket(0x28, 0x0, 0x0) [ 261.561573][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 261.564090][T17697] FAULT_INJECTION: forcing a failure. [ 261.564090][T17697] name fail_usercopy, interval 1, probability 0, space 0, times 0 18:07:50 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "1a364817c7ff127c3ca043170cf432fdfddb0bbdd669b80a9359d5aa2bc6593edb78208019aa81d7dfaa7412120c29c25d4df9b877a64d19654c0552793b050d4c1053738504630c234f0971d003189a7fe6abab88836c52ef81a7736ca958ffe840fa83d82873cec180f0b270b548b5a849d067e885fbaade9ebb5da5a028"}, 0x83) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000880)={"f59187ca8963e64e8783971056898c90", 0x0, 0x0, {0x40, 0x4}, {0xffffffffffffffe0, 0xfffffffc}, 0x140000000000000, [0xfffffffffffffffc, 0x2, 0x6b6, 0x0, 0x5, 0xe30f, 0x80, 0x8, 0x302a3f47, 0xfffffffffffff000, 0x397, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x5]}) socket$inet_sctp(0x2, 0x1, 0x84) 18:07:50 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) 18:07:50 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x700000000000000, 0x0, 0x0, 0x0) [ 261.707671][T17697] CPU: 1 PID: 17697 Comm: syz-executor.2 Not tainted 5.11.0-rc2-syzkaller #0 [ 261.716504][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.726585][T17697] Call Trace: [ 261.729882][T17697] dump_stack+0x107/0x163 [ 261.734240][T17697] should_fail.cold+0x5/0xa [ 261.738782][T17697] _copy_to_user+0x2c/0x150 [ 261.743323][T17697] simple_read_from_buffer+0xcc/0x160 [ 261.748726][T17697] proc_fail_nth_read+0x187/0x220 [ 261.753814][T17697] ? proc_exe_link+0x1d0/0x1d0 [ 261.758600][T17697] ? security_file_permission+0x248/0x560 [ 261.764358][T17697] ? proc_exe_link+0x1d0/0x1d0 [ 261.769146][T17697] vfs_read+0x1b5/0x570 [ 261.773339][T17697] ksys_read+0x12d/0x250 [ 261.777610][T17697] ? vfs_write+0xa30/0xa30 [ 261.782057][T17697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 261.787991][T17697] do_syscall_64+0x2d/0x70 [ 261.792436][T17697] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 261.798357][T17697] RIP: 0033:0x417b11 [ 261.802266][T17697] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 261.821900][T17697] RSP: 002b:00007efe42079c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 261.830343][T17697] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000417b11 [ 261.838341][T17697] RDX: 000000000000000f RSI: 00007efe42079cb0 RDI: 0000000000000003 [ 261.846334][T17697] RBP: 00007efe42079ca0 R08: 0000000000000000 R09: 0000000000000000 [ 261.854582][T17697] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 261.862569][T17697] R13: 00007fffce5a770f R14: 00007efe4207a9c0 R15: 000000000119bf8c 18:07:50 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) 18:07:50 executing program 4: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40a02, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000e800531d7a3d2af8adc22e20d2298d4c257763cd38a0b923f55b3d6123f845c525b59bfb899338aa55326d27520c2d65cec84f89ab3e290c47d17553ea765204181683fb7742b322e8d8f4e0646081be9305f28131a54d93f415", @ANYRES16=r2, @ANYBLOB="00042bbd7000fcdbdf250100000005002100010009000000000000000000726b7fb93cba04ec60558d423a351a5d56cecdf331fb92f6e1d183a5a9a6de09503a66916320168f33082e5e1cdfffb87188749c69478e1f34c756bccd26ddc7d2f4f90cf486cd66a2be6373c5bbb8aabc6869a2d3021ae020b6ce1c312d38d55e7d1f084e67f1d00584061f81f24aabbeea177edcb6fd8d20a38fb9457b300b49098e1fe01b3ad368507b46205ce19fffcd99f42144e3b1c4bea5189c"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='rtc_alarm_irq_enable\x00', r1}, 0x10) write$char_usb(r0, 0x0, 0x2b) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) 18:07:50 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) r2 = socket(0x28, 0x6, 0x7) sendto$l2tp(r2, &(0x7f0000000680)="67211c82bd3fa4969589db993d4ffd53a6b29a2313bc3fa733e7af7ae6f1685c9ae332be0b4199bcf9b1cbb289b030a9b27e53188d691b219e453c05433ea3235f9610b9721f9661283b6ff50a2e2b772bf786f82e08d43643a6a2ae3121dac70988680182b029428d0fbe8ee52d597516a7c745093d77e857b51f7a6117c30b5d371a12061050e5bf83e8f8af9a783db019b15894c22cc02c", 0x99, 0x8040, &(0x7f0000000740)={0x2, 0x0, @loopback, 0x3}, 0x10) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000780)) 18:07:50 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) socket(0x28, 0x6, 0x7) 18:07:50 executing program 1: socket(0x28, 0x0, 0x0) 18:07:50 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) 18:07:50 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0) 18:07:51 executing program 5 (fault-call:0 fault-nth:0): socket(0x28, 0x0, 0x7) 18:07:51 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x2}, 0x4) 18:07:51 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="2f7b5fd1ff93104f40c44401ecab7ed7154290a0a9a882e1947dd647939eb8a994318e0ee89297993419955c68b1ac7f", 0x30) [ 262.318621][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:07:51 executing program 1: socket(0x0, 0x0, 0x0) 18:07:51 executing program 4: socket$inet6_dccp(0xa, 0x6, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) [ 262.477545][ T8496] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 262.487146][T17733] FAULT_INJECTION: forcing a failure. [ 262.487146][T17733] name failslab, interval 1, probability 0, space 0, times 0 [ 262.487160][ T8496] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 262.487182][T17733] CPU: 1 PID: 17733 Comm: syz-executor.5 Not tainted 5.11.0-rc2-syzkaller #0 [ 262.516006][T17733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.526563][T17733] Call Trace: [ 262.529856][T17733] dump_stack+0x107/0x163 [ 262.534217][T17733] should_fail.cold+0x5/0xa [ 262.538754][T17733] should_failslab+0x5/0x10 [ 262.543278][T17733] kmem_cache_alloc+0x54/0x4c0 [ 262.548075][T17733] ? selinux_ipv4_output+0x180/0x180 [ 262.553417][T17733] ? sock_free_inode+0x20/0x20 [ 262.558282][T17733] sock_alloc_inode+0x18/0x1c0 [ 262.563071][T17733] ? sock_free_inode+0x20/0x20 [ 262.567854][T17733] alloc_inode+0x61/0x230 [ 262.572285][T17733] new_inode_pseudo+0x14/0xe0 [ 262.577080][T17733] sock_alloc+0x3c/0x260 [ 262.581353][T17733] __sock_create+0xb9/0x780 [ 262.585883][T17733] ? wait_for_completion_io+0x260/0x260 [ 262.591467][T17733] __sys_socket+0xef/0x200 [ 262.595912][T17733] ? move_addr_to_kernel+0x70/0x70 [ 262.601063][T17733] __x64_sys_socket+0x6f/0xb0 [ 262.605859][T17733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 262.611783][T17733] do_syscall_64+0x2d/0x70 [ 262.616221][T17733] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 262.622168][T17733] RIP: 0033:0x45e219 [ 262.626082][T17733] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.646149][T17733] RSP: 002b:00007f0177a0fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 262.654592][T17733] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 262.662583][T17733] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000028 [ 262.670569][T17733] RBP: 00007f0177a0fca0 R08: 0000000000000000 R09: 0000000000000000 18:07:51 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x5}, 0x4) [ 262.678555][T17733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.688131][T17733] R13: 00007ffc4482f00f R14: 00007f0177a109c0 R15: 000000000119bf8c [ 262.711876][ T35] audit: type=1400 audit(1609783671.364:9): avc: denied { create } for pid=17734 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 262.722087][T17733] socket: no more sockets 18:07:51 executing program 4: syz_open_dev$char_usb(0xc, 0xb4, 0x6) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) write$char_usb(r0, 0x0, 0x9a72a1525da74f4a) 18:07:51 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x7000000, 0x0, 0x0) 18:07:51 executing program 1: socket(0x0, 0x0, 0x0) 18:07:51 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8) 18:07:51 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) 18:07:51 executing program 5 (fault-call:0 fault-nth:1): socket(0x28, 0x0, 0x7) 18:07:51 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8100, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) write$char_usb(r0, 0x0, 0x0) 18:07:51 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) [ 263.068633][T17758] FAULT_INJECTION: forcing a failure. [ 263.068633][T17758] name failslab, interval 1, probability 0, space 0, times 0 [ 263.112635][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 263.120716][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:07:51 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x441, 0x0) [ 263.165454][T17758] CPU: 0 PID: 17758 Comm: syz-executor.5 Not tainted 5.11.0-rc2-syzkaller #0 [ 263.174270][T17758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.184348][T17758] Call Trace: [ 263.187642][T17758] dump_stack+0x107/0x163 [ 263.192000][T17758] should_fail.cold+0x5/0xa [ 263.196537][T17758] should_failslab+0x5/0x10 [ 263.201064][T17758] kmem_cache_alloc+0x54/0x4c0 [ 263.205862][T17758] security_inode_alloc+0x34/0x160 [ 263.210997][T17758] inode_init_always+0x5a9/0xdb0 18:07:51 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x2}}, 0x4) [ 263.215980][T17758] ? __init_waitqueue_head+0x97/0x110 [ 263.221455][T17758] alloc_inode+0x82/0x230 [ 263.225807][T17758] new_inode_pseudo+0x14/0xe0 [ 263.230508][T17758] sock_alloc+0x3c/0x260 [ 263.234784][T17758] __sock_create+0xb9/0x780 [ 263.239307][T17758] ? wait_for_completion_io+0x260/0x260 [ 263.244976][T17758] __sys_socket+0xef/0x200 [ 263.249420][T17758] ? move_addr_to_kernel+0x70/0x70 [ 263.254566][T17758] __x64_sys_socket+0x6f/0xb0 [ 263.259269][T17758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 263.265186][T17758] do_syscall_64+0x2d/0x70 [ 263.269626][T17758] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 263.275550][T17758] RIP: 0033:0x45e219 [ 263.279461][T17758] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.299092][T17758] RSP: 002b:00007f0177a0fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 263.307529][T17758] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 18:07:52 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 18:07:52 executing program 1: socket(0x0, 0x0, 0x0) 18:07:52 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0xf0ffffff7f0000, 0x0, 0x0) [ 263.315521][T17758] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000028 [ 263.323510][T17758] RBP: 00007f0177a0fca0 R08: 0000000000000000 R09: 0000000000000000 [ 263.331621][T17758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.339630][T17758] R13: 00007ffc4482f00f R14: 00007f0177a109c0 R15: 000000000119bf8c [ 263.452254][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 2 [ 263.463069][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 2 18:07:52 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x3}}, 0x4) [ 263.499395][T17758] socket: no more sockets 18:07:52 executing program 5 (fault-call:0 fault-nth:2): socket(0x28, 0x0, 0x7) 18:07:52 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000500)={0x0, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) 18:07:52 executing program 1: syz_open_dev$char_usb(0xc, 0xb4, 0x6) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) write$char_usb(r0, 0x0, 0x9a72a1525da74f4a) [ 263.604994][T17779] FAULT_INJECTION: forcing a failure. [ 263.604994][T17779] name fail_usercopy, interval 1, probability 0, space 0, times 0 18:07:52 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0xfffffffffffffd1c) 18:07:52 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x700000000000000, 0x0, 0x0) [ 263.658720][T17779] CPU: 0 PID: 17779 Comm: syz-executor.5 Not tainted 5.11.0-rc2-syzkaller #0 [ 263.667550][T17779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.677624][T17779] Call Trace: [ 263.680915][T17779] dump_stack+0x107/0x163 [ 263.685273][T17779] should_fail.cold+0x5/0xa [ 263.689813][T17779] _copy_to_user+0x2c/0x150 [ 263.694348][T17779] simple_read_from_buffer+0xcc/0x160 [ 263.699758][T17779] proc_fail_nth_read+0x187/0x220 [ 263.704812][T17779] ? proc_exe_link+0x1d0/0x1d0 [ 263.709679][T17779] ? security_file_permission+0x248/0x560 [ 263.715429][T17779] ? proc_exe_link+0x1d0/0x1d0 [ 263.720213][T17779] vfs_read+0x1b5/0x570 [ 263.724408][T17779] ksys_read+0x12d/0x250 [ 263.728667][T17779] ? vfs_write+0xa30/0xa30 [ 263.733110][T17779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 263.739033][T17779] do_syscall_64+0x2d/0x70 [ 263.743469][T17779] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 263.749394][T17779] RIP: 0033:0x417b11 [ 263.753298][T17779] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 263.772924][T17779] RSP: 002b:00007f0177a0fc70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 263.781360][T17779] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417b11 [ 263.789348][T17779] RDX: 000000000000000f RSI: 00007f0177a0fcb0 RDI: 0000000000000003 [ 263.797338][T17779] RBP: 00007f0177a0fca0 R08: 0000000000000000 R09: 0000000000000000 [ 263.805329][T17779] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 263.813321][T17779] R13: 00007ffc4482f00f R14: 00007f0177a109c0 R15: 000000000119bf8c [ 263.839995][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 3 18:07:52 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7) [ 263.868539][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 3 18:07:52 executing program 5: socket(0x28, 0x0, 0x7) 18:07:52 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x7}}, 0x4) 18:07:52 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) 18:07:52 executing program 5: socket(0x2, 0x0, 0x7) 18:07:52 executing program 1: syz_open_dev$char_usb(0xc, 0xb4, 0x6) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) write$char_usb(r0, 0x0, 0x9a72a1525da74f4a) 18:07:52 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) write$char_usb(r0, 0x0, 0x0) [ 264.075688][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 7 [ 264.085423][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 7 18:07:52 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x8}}, 0x4) 18:07:52 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x700) 18:07:53 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000003c0)={0x1, 0x7, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) 18:07:53 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x2000, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000040) 18:07:53 executing program 1: syz_open_dev$char_usb(0xc, 0xb4, 0x6) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) write$char_usb(r0, 0x0, 0x9a72a1525da74f4a) 18:07:53 executing program 5: socket(0x5, 0x0, 0x7) [ 264.431053][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 8 [ 264.438735][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 8 18:07:53 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x300}}, 0x4) 18:07:53 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7000000) 18:07:53 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4662}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048021) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) 18:07:53 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)=0x2) write$char_usb(0xffffffffffffffff, 0x0, 0x0) [ 264.684966][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 768 [ 264.694174][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 768 18:07:53 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x700}}, 0x4) 18:07:53 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000) 18:07:53 executing program 1: syz_open_dev$char_usb(0xc, 0xb4, 0x6) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) write$char_usb(r0, 0x0, 0x9a72a1525da74f4a) 18:07:53 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) 18:07:53 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="bf44ef1867d53122452750e164050085b4f5bbba62921e15ecc9ed9b4bc3307078124774a14798377f039fcfa9908f31b9316d5643d2a73f8333ba81f36413b7acbb67ad79545cd3f6bc0f159834d96cf413df5525017bc9e6fcda1861269d1c16fcf9956260aff12809c6606b3c86a595948a79b4fa50516cbd915331b280759fa92bfee9fdfcfd00ab9655a95b89d1da89c1fd9bb30d04132cc030af6b06aac77124ddc0d314d1a01d00"/185, 0xb9, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000100)={r1}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) write$char_usb(r2, 0x0, 0xfffffffffffffe1c) 18:07:53 executing program 5: socket(0xa, 0x0, 0x7) 18:07:53 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) [ 264.949429][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 1792 [ 264.958179][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 1792 18:07:53 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000100)="321c6c289ba4bbd729b1c9cc0863d5748ce386aaf1728006443d89118496e7cafdeabb70cd457826006627f840669de062abcc7917a751673a9ee6800f5328ce8024b6f35b1284cc7b720617e6d7c2cc06dbda2d3ef8e61dc974d1259e8b5f6452a1d11b8a280bbfc0d534556fef982bc089d1929dbf13a27c8d7be44a2922a44087d2f049ec2c6ba7e7950b27b31159da23f09b000929a8158a4db7c1004cdf70b7a8b7bfad15cc746000e024ed74e24cc140721879e3e2bc389709d12aebe1f551c83400", 0xc5, 0xffffffff}, &(0x7f0000000240)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) 18:07:53 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000) [ 265.167788][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 265.179400][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:07:53 executing program 1: syz_open_dev$char_usb(0xc, 0xb4, 0x6) write$char_usb(0xffffffffffffffff, 0x0, 0x9a72a1525da74f4a) 18:07:53 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x700000000000000) 18:07:53 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) write$char_usb(r0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 18:07:53 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x2}}, 0x4) 18:07:54 executing program 1: syz_open_dev$char_usb(0xc, 0xb4, 0x6) write$char_usb(0xffffffffffffffff, 0x0, 0x9a72a1525da74f4a) 18:07:54 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) 18:07:54 executing program 5: socket(0xf, 0x0, 0x7) [ 265.473774][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 265.481677][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:07:54 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000040)="d02254ae2952652a6b7a7a31e2ce707a6562", 0x12, 0x1, 0x0, 0x3}, &(0x7f00000000c0)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) 18:07:54 executing program 3: socket$inet(0x2, 0x4, 0x2) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) sendto$l2tp(r0, 0x0, 0x30, 0x20040010, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') 18:07:54 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x3}}, 0x4) 18:07:54 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000100)=0x80) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/nvram\x00', 0x8c00, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000026c0)={0xffffffffffffffff}) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000402}, 0xc, &(0x7f0000002800)={&(0x7f0000002700)={0xe8, r0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xe8}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:07:54 executing program 5: socket(0x10, 0x0, 0x7) 18:07:54 executing program 1: syz_open_dev$char_usb(0xc, 0xb4, 0x6) write$char_usb(0xffffffffffffffff, 0x0, 0x9a72a1525da74f4a) [ 265.755434][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 265.763104][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:07:54 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x7}}, 0x4) 18:07:54 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) 18:07:54 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 18:07:54 executing program 5: socket(0x11, 0x0, 0x7) [ 265.998672][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 266.008329][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:07:54 executing program 0: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) 18:07:54 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) write$char_usb(r0, 0x0, 0x9a72a1525da74f4a) 18:07:54 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400280, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000280)={&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000180)=""/91, 0x5b}], 0x3, &(0x7f0000000240)}, 0x20000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x9, 0x3, {{0x29, 0x4, 0x2, 0x13, 0xa4, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x28}, {[@ra={0x94, 0x4}, @noop, @cipso={0x86, 0x88, 0x1, [{0x5, 0xb, "3228632f8f66a62371"}, {0x1, 0xd, "8a8474968d964592c4df64"}, {0x5, 0x12, "f0250cd423baf8cb622300786e033614"}, {0xb14e85e0dac6e5fc, 0xf, "14c337a4e84bb36ebd3638ce6b"}, {0x1, 0xc, "41650d4c6bd8f6ea59fa"}, {0x5, 0x10, "85efa60ee6800dc27dd09e8b5452"}, {0x5, 0x11, "e1dc502e570b1bf8225f773de2a973"}, {0x5, 0xf, "0cf5e9e071124d70d98b802c96"}, {0x0, 0x8, "32f5442245a9"}, {0x6, 0x5, "0984cc"}]}, @noop, @noop]}}}}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:07:54 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x8}}, 0x4) 18:07:54 executing program 0: mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 18:07:54 executing program 5: socket(0x2c, 0x0, 0x7) 18:07:54 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x7, &(0x7f0000000100)=@raw=[@generic={0x2, 0x5, 0x1, 0x7f, 0xa}, @generic={0xff, 0x9, 0x0, 0x8, 0x1ff}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000140)='GPL\x00', 0x39, 0x0, 0x0, 0x5645984722d6dd22, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0x2ca63b58}, 0x10, 0x24285, r0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r1}, 0x10) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000000)={[{0x3, 0x4, 0x9, 0x2, 0x8, 0x1, 0x0, 0x3f, 0x80, 0x2, 0x2, 0x0, 0xffffffffffff8000}, {0xd7a4, 0x340f, 0x7f, 0x6, 0x2, 0x3f, 0x4d, 0x7, 0xaa, 0x1f, 0x7, 0x20, 0x18e4b79}, {0x101, 0x1, 0x6, 0x7, 0x1, 0x7f, 0xe3, 0x1, 0x5, 0xff, 0x0, 0x26, 0xffffffffffffff01}], 0x1c3}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xad1, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000000c0)={r2, 0x2}) [ 266.302642][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 266.320217][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:07:55 executing program 3: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:07:55 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0xfdef) 18:07:55 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x9a72a1525da74f4a) 18:07:55 executing program 5: socket(0x28, 0x2, 0x7) 18:07:55 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000140)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000240)=""/92) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001300000825bd7000fedbdf2522cd017f4e224e2000000100ff0100004600000002000000070000000780000008000000ec000000", @ANYRES32=0x0, @ANYBLOB="04000000000000001f00000009000000060001b5f591e2c4c34532fa0700e1c21af45167e3bb8cbb943c8546d901df5bc15442ca79748dbe9537b8b49c2a6213e75f0c096197c55ee23e5faa9f51609c100b29976accc45f590f8be96f00a0ebd2be"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 18:07:55 executing program 0: mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 18:07:55 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040)={[0x4]}, 0x0, &(0x7f00000000c0)={r1, r2+60000000}, 0x8) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000000)) 18:07:55 executing program 5: socket(0x28, 0x3, 0x7) 18:07:55 executing program 0: mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 18:07:55 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x9a72a1525da74f4a) 18:07:55 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x7ffff) 18:07:55 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) write$char_usb(r1, 0x0, 0xffffff99) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/137, 0x89}], 0x1, &(0x7f0000000180)=""/2, 0x2}, 0x140) 18:07:55 executing program 5: socket(0x28, 0x4, 0x7) 18:07:55 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x9a72a1525da74f4a) 18:07:55 executing program 0: write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000140)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000240)=""/92) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001300000825bd7000fedbdf2522cd017f4e224e2000000100ff0100004600000002000000070000000780000008000000ec000000", @ANYRES32=0x0, @ANYBLOB="04000000000000001f00000009000000060001b5f591e2c4c34532fa0700e1c21af45167e3bb8cbb943c8546d901df5bc15442ca79748dbe9537b8b49c2a6213e75f0c096197c55ee23e5faa9f51609c100b29976accc45f590f8be96f00a0ebd2be"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 18:07:55 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x200007c4) 18:07:55 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000040)={0x136c, 0x14, 0x800, 0x70bd2b, 0x25dfdbfb, {0xb, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x83, 0x1, "f46e853d63a27d7d484ac560c2dcc0fd0e44562f5ad57033cab62f30549575f29fdf1a3f4c3d6eade95e900815554273720be2ed108b982dd2e8eb43490c7754a757151100a7dc6b3f75feb17cd07bf5cdf94a9941087b4bd5b941927d6ce8e7f4be6947359caca4014c1da04fa686cd633a3def06e115e57001a48b51a8d6"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "ba807ededad2ebb1884c4551b8871c098cceeeb31cbcb3b58c430b7c9591b1bfd184f5490131443edb8e7e4dfd2e7fa689b8dad45b023b0a08d43ed2f30f8bd5e4a94605aed24e49c30d6a31c4d91343c92730fcec78f8007f4039b0484d7e04a7aaa50073fdb5bb8cd49fb0f3bed8f47233aebc707fa4ccfa4ec3cc5424ec6db675a4425a1f19009c4960b637b3473e6be14a0782d07b39860833e225f8e54481e44a0cdfec0f"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "7b6ea325107f03a9b7672a5b1c7f9e6db4b629f3204cd59bd79aeea6022718fe213031d889e26b8e2ddd9111c01734681cb50c6b9cb8d62a1385524e880f4e2caa04019d17f17dc73873a245d05866fc63bcd714de7dba0fbea79592b038b42f7839a02c2cbef8961e2fa1cc69eb988a07bc8989933ea3670078e9ba69b0e3a8788e72f087b7978fe5cf05fbc355135d28a7567025dbe52b98f5d50cc96d9f4e7e90a34733f9749341a95a2e3e209b7191414894330ee4c49447afd3d42bead74407db83706a6a"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "824b904a91adb70633b79bfe9d19626468d52a8c5a0cae1da9fc18fab87c37d34b5681beb480690b7cd594f877e5120336cb5bf9ed74a70829c9f77c3ee35073292c6376ef0dfb17804690c76d392b55f139fb3cbd2b071fdb37d86b807593c2015d5427d5697cf7dc4d6cc29886e94a02e1"}, @INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "1ad082389180634e059a9735cdd225af71cfc5152e2a6a19389771b319da62ab564f7da760bc502da5a6f140bb498a3b871f155aa940a6464015fd04a96ed5a3d197bf87098f4bd8decfc9e425ac97e0af55d71529bd0f236a3a3131caae67b1284b647d0d0d4ec496613f31254b24c511d4467ff231a77390d9238d9bce1683e72ba07749d4f3de50c17b8804d95f78b96c9ca2b10dc6d8c080790ff01b6692da8fb9d609a6eea1365ce4b6613fb6f42258ce67447c8aa204103095027da89a08684e8cf9f7264cb47f18d9fd951f4c099cc7ac37cab7ef241ceb3b"}]}, 0x136c}, 0x1, 0x0, 0x0, 0x40041}, 0x0) 18:07:55 executing program 5: socket(0x28, 0x5, 0x7) 18:07:56 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000000)="6fe706d37eaa96501670ec7f3088a7f821392fe538bbe0bba8316e56634d7626d3d3aa98a9bf4829a4257181df4c5a7d5c796d8b11f00edff11ecceadc64af842b1267edc3277d3578e52ada52b7c3a6e19e8b698e17a224e624848c6d11b0c742f28132ae260fbc0c9caebe7af8b8e57e9cdff60f982144cbf4a6d6be2234dc1c2f5eb34b7046be91845c251728bef18c87", 0x92, 0x4048014, 0x0, 0x0) 18:07:56 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x9a72a1525da74f4a) 18:07:56 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0xfffffdef) 18:07:56 executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:07:56 executing program 5: socket(0x28, 0x6, 0x7) 18:07:56 executing program 4: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@empty, @in=@local}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r0, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r0, 0x700, 0x700, 0x8, 0x7, {{0x46, 0x4, 0x0, 0x5, 0x118, 0x68, 0x0, 0x7f, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x93, 0x1, 0x0, [{@private=0xa010102, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x6e}]}, @rr={0x7, 0x2b, 0x58, [@local, @rand_addr=0x64010100, @remote, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100]}, @rr={0x7, 0x7, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x13, 0xd5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0x8e, 0x3, 0x8, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x2}, {@multicast2, 0x6}, {@empty, 0x3}]}, @ssrr={0x89, 0x1b, 0xb7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010100, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1b, 0x7d, [@multicast2, @private=0xa010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback]}, @lsrr={0x83, 0xb, 0xc6, [@empty, @remote]}, @timestamp_addr={0x44, 0x44, 0x8e, 0x1, 0x1, [{@rand_addr=0x64010101, 0x8000}, {@remote, 0x9}, {@broadcast, 0x20000000}, {@remote}, {@private=0xa010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x7}, {@multicast1, 0x9a90a1b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x32}]}]}}}}}) r1 = socket$l2tp(0x2, 0x2, 0x73) write$char_usb(0xffffffffffffffff, 0x0, 0x0) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x6cd, r1, &(0x7f0000000300)="0c3d4bc9c44c1d43f9e73531dcd5b58b0ed8fad40409f2332b78a1224cc4fdd91e1b8ef1591581e4ea09c5193a83b02650de50cc45bd0c406b4a23f7c5c41b0bd55b00757186dc1305f48b772994c934164fc6ee58b7868184dabc319f597a422f982cb08dc1060326ec58c3237b1a3487f93217e9b71e5ba1f50c57515bb27ea197e896d5798152cb97f8875239", 0x8e, 0x6, 0x0, 0x2}, &(0x7f0000000400)) 18:07:56 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x9a72a1525da74f4a) 18:07:56 executing program 5: socket(0x28, 0x7, 0x7) 18:07:56 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0xfffffffffffffdef) 18:07:56 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x519602, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001340)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x13}, @void, @val={0xc, 0x99, {0x8, 0x53}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x30000000}, @NL80211_ATTR_VENDOR_DATA={0x71, 0xc5, "ec1c40525c43c33949b691e69ebee9a54b91699df4cd542f076e17ca0487806f7b7fbd0151a8e0fa6646b2e9677ab3739adee6134267f67238d6b6e1a34849564ead1450b3c81e6d92a5d2a57eb8b78fea816f05cf546dd1a45a2aea3251b7cff0bbc8f291247faca0879ab512"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000800}, 0x20000804) write$char_usb(r0, 0x0, 0x0) 18:07:56 executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:07:56 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8400, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:07:56 executing program 5: socket(0x28, 0xa, 0x7) 18:07:56 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x9a72a1525da74f4a) 18:07:56 executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:07:56 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) 18:07:56 executing program 4: syz_open_dev$char_usb(0xc, 0xb4, 0x400) syz_open_dev$char_usb(0xc, 0xb4, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 18:07:56 executing program 3: socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x110, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x24004000) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3800002710281ae2db1b0d69ad7c60b500", @ANYRES16=r0, @ANYBLOB="080029bd7000fedbdf250100000014001f00fe8000000000000000000000000000bb050022000100000006001b004e220000"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x2000c010) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000440)) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000480)="37e6239ade44f972f554af53a9653ca0ced9265f851ccc458e2b3629b1f28c1305103930502fbbf230d2e251acca03e741a38b0952798571410149", 0x3b) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, [], 0x1}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @rand_addr=0x64010100}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48004}, 0x4010) bind$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dri/renderD128\x00', 0x40003, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fd5bdf25f700000014000200fc0100000000000000000000000000000300060076657468305f6d614276746d700000001a283ec948844e21acf3b05bb4645b9a64486383fe9136711e1158b9251684638f3bc31cb21e23fc49e81786476f5509cb795af2b8c211e7ba8d9ee8dc2d56a75536584b4bf147e73368e1b79bd19b9033112b6dcf08af3431d972a45b87da6ea43091cf46c580fa821e28c83f0d095dbd9aeae093c79993c7f738"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x44) 18:07:57 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x519602, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001340)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x13}, @void, @val={0xc, 0x99, {0x8, 0x53}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x30000000}, @NL80211_ATTR_VENDOR_DATA={0x71, 0xc5, "ec1c40525c43c33949b691e69ebee9a54b91699df4cd542f076e17ca0487806f7b7fbd0151a8e0fa6646b2e9677ab3739adee6134267f67238d6b6e1a34849564ead1450b3c81e6d92a5d2a57eb8b78fea816f05cf546dd1a45a2aea3251b7cff0bbc8f291247faca0879ab512"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000800}, 0x20000804) write$char_usb(r0, 0x0, 0x0) 18:07:57 executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) 18:07:57 executing program 5: socket(0x28, 0x2cc, 0x7) 18:07:57 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0xbd) r0 = socket$inet(0x2, 0x4, 0x3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'gretap0\x00', r1, 0x700, 0x8, 0x8, 0x2808, {{0x33, 0x4, 0x3, 0x26, 0xcc, 0x0, 0x0, 0x5, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x44, 0x51, 0x3, 0x7, [{@broadcast, 0x1}, {@private=0xa010100, 0x8}, {@multicast2, 0x10000}, {@local, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@empty, 0x36}, {@rand_addr=0x64010102, 0xb3}, {@private=0xa010102, 0x3}]}, @ra={0x94, 0x4, 0x8}, @timestamp_addr={0x44, 0x1c, 0xf9, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x4}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}]}, @timestamp_prespec={0x44, 0x1c, 0xe4, 0x3, 0x1, [{@private=0xa010100, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x2e}}, {@rand_addr=0x64010101, 0x8}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x3f, 0x3, 0x9, [{@loopback, 0x2}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd6}, {@multicast2, 0x6}]}, @rr={0x7, 0x13, 0x2f, [@loopback, @private=0xa010100, @rand_addr=0x64010100, @multicast1]}]}}}}}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x1, 0x3ff, 0x0, 0x401}, 0x8) 18:07:57 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x50140, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, &(0x7f0000000040)={0x1, 0x7, 0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x2000, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, &(0x7f0000000200)=""/90, 0x5a}, 0x10102) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000004c0)={[{0x5, 0x6, 0x9, 0x3f, 0xa3, 0x92, 0x4, 0xff, 0xff, 0x3f, 0x4, 0x2c, 0xfff}, {0x1, 0xfff, 0x2, 0x0, 0x1, 0x3, 0x81, 0x81, 0x0, 0x8, 0x80, 0x6}, {0x3, 0x4, 0x70, 0xf8, 0xbb, 0x1, 0xf3, 0x0, 0x1, 0x1f, 0x3f, 0x2, 0x8001}], 0x80000001}) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0xf9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000400)={0x3, 0x9, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000440)={r5}) 18:07:57 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40088, 0x0, 0x0) 18:07:57 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x519602, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001340)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x13}, @void, @val={0xc, 0x99, {0x8, 0x53}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x30000000}, @NL80211_ATTR_VENDOR_DATA={0x71, 0xc5, "ec1c40525c43c33949b691e69ebee9a54b91699df4cd542f076e17ca0487806f7b7fbd0151a8e0fa6646b2e9677ab3739adee6134267f67238d6b6e1a34849564ead1450b3c81e6d92a5d2a57eb8b78fea816f05cf546dd1a45a2aea3251b7cff0bbc8f291247faca0879ab512"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000800}, 0x20000804) write$char_usb(r0, 0x0, 0x0) 18:07:57 executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:07:57 executing program 5: socket(0x28, 0x300, 0x7) 18:07:57 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008050}, 0x4) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000380)) 18:07:57 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000040)=""/246, 0xf6}, {&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000000240)=""/8, 0x8}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000340)=""/242, 0xf2}], 0x8}, 0x10100) 18:07:57 executing program 2: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r0, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x82000020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe0}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40011}, 0x20000044) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f00000003c0)) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048080}, 0x1) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0300001a7d26ccbed09bf2bf929e7a13160ce7008eb66b81db97fd6a770e77d91fc9349e746ab938225414282353b8ea26293c2483fb6ff51540258133d05b9a8654aa1dd9c7c9ed46ec0c57064f19afc142131bd07113149bff012e9605906a5be730c8aa6018316dde81d72a2b25e6e2e209fdb281a220fb612aa4f92172fa1eeddf8e00918ca95f8e5e984188c531dff35627e30df62786ac701201a727558bce5087a0cfa7e1e229b122a3e7bdd9b642bc321e2dab0bb9f35ee2fb5f0968a441b25832860000c98fb49671f7"], 0x4) 18:07:57 executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:07:57 executing program 5: socket(0x28, 0x480, 0x7) 18:07:57 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x519602, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001340)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x13}, @void, @val={0xc, 0x99, {0x8, 0x53}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x30000000}, @NL80211_ATTR_VENDOR_DATA={0x71, 0xc5, "ec1c40525c43c33949b691e69ebee9a54b91699df4cd542f076e17ca0487806f7b7fbd0151a8e0fa6646b2e9677ab3739adee6134267f67238d6b6e1a34849564ead1450b3c81e6d92a5d2a57eb8b78fea816f05cf546dd1a45a2aea3251b7cff0bbc8f291247faca0879ab512"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000800}, 0x20000804) write$char_usb(r0, 0x0, 0x0) 18:07:57 executing program 4: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffc) write$char_usb(r0, 0x0, 0x0) 18:07:57 executing program 2: syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2}, @l2cap_cid_signaling={{}, [@l2cap_info_rsp={{0xb, 0xeb}, {0x8, 0x7f, "4f4a19b1b480595fc7b222118cd796b8670c09680ec724db61bfbda5733fcd428dc0efbbfd225b43e93d897117c3d339767c537ba22778a9b2d71577c80cd780ffb1e84aaded89a56af7fe95199fc524f6d6db9a67872052dbff07ecb24769db9da1997b6969205560589c3a545e869af0"}}, @l2cap_create_chan_req={{0xc, 0x1}, {0x7, 0x5, 0x5}}, @l2cap_move_chan_cfm={{0x10, 0x4}, {0x200, 0x2}}, @l2cap_disconn_req={{0x6, 0x7}, {0x3, 0x2}}, @l2cap_create_chan_req={{0xc, 0x9}, {0x6, 0xda9d, 0x1f}}, @l2cap_disconn_req={{0x6, 0x3f}, {0x2, 0xf3f}}, @l2cap_conf_req={{0x4, 0x1}, {0x800, 0x3, [@l2cap_conf_rfc={0x4, 0x0, {0x3, 0x0, 0xbf, 0x5, 0xf4, 0x9}}, @l2cap_conf_rfc={0x4, 0x0, {0x1, 0x39, 0x2, 0x3, 0x8000, 0x8}}, @l2cap_conf_rfc={0x4, 0x0, {0x1, 0xfb, 0x4c, 0x3ff, 0x5, 0x3}}, @l2cap_conf_fcs={0x5, 0x0, 0x1}, @l2cap_conf_ews={0x7, 0x0, 0xfffd}, @l2cap_conf_ews={0x7, 0x0, 0x1}, @l2cap_conf_flushto={0x2, 0x0, 0x738d}, @l2cap_conf_efs={0x6, 0x0, {0x48, 0x1, 0x1, 0x6, 0x6, 0x100}}]}}, @l2cap_conn_rsp={{}, {0x1, 0x81, 0x8000}}, @l2cap_info_rsp={{0xb, 0x1}, {0x200, 0x9, "45dfb85d6c481c6ae257aecaadaa80c149f0d302886ebb7513d7ed8970c5293258da78faa1fa37c2c5d277c23d6365c846708c54115f7e42853622250c2575f6ec947fb2023ddacd4eedbf979d41285c8243711132c511e800120dad596778475d9e55b4f4592a9e418dd72633bd3aa95cba1319513136dc0bb53f9b53f04825332f12ff83245957da1c4c4d6a36e9b6dcaf2c96cb64ab48d90f4e1339b91fb5eb04894a"}}, @l2cap_move_chan_req={{0xe, 0x6}, {0x4e}}]}}, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) sendto$l2tp(r0, &(0x7f00000002c0)="3ce5564ebc19b7e64f3fbbdc07a8ae58d39c4300115478477a7574868f3b942f444a57902295ba8519d4013ee08ea58ca4c37e70b1ed3000e63885b75ce7e6adc16af9da91fbdea2daf95823903ef2467cbf36ebff867fc835a31a6c630b5c0e8e4157aac52582ce932ed6813cea7225635eac50ba4e6b174a2c7f3f92cd42ba8002e23e7b64f0", 0x87, 0x40, &(0x7f0000000080)={0x2, 0x0, @private=0xa010100, 0x2}, 0x10) [ 269.004293][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 269.026087][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:07:57 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7f}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x50030}, 0x4008005) 18:07:57 executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:07:57 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000000)=@hci, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/231, 0xe7}, {&(0x7f0000001180)=""/151, 0x97}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/88, 0x58}, {&(0x7f00000022c0)=""/101, 0x65}, {&(0x7f0000002340)=""/34, 0x22}, {&(0x7f0000002380)=""/164, 0xa4}, {&(0x7f0000002440)=""/115, 0x73}], 0x9, &(0x7f0000002580)=""/62, 0x3e}, 0x2001) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:07:57 executing program 5: socket(0x28, 0x500, 0x7) 18:07:57 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x5f}, {0xfffe, "f612b029da19dd205d538d0bef2e902a1a5447f6aa798826ebee9b023f056518441dff566a4053bd57cfa264c89d1fb69dcaa558a2e6c74378dd1e91366b5ade289ced0998899bee886e58fd70dcc007f9499f2583bc1519caa53cd246"}}}, 0x62) 18:07:58 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x6}, 0x4) 18:07:58 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x519602, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001340)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) write$char_usb(r0, 0x0, 0x0) 18:07:58 executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:07:58 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x87e}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 18:07:58 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x450000, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) write$char_usb(r0, 0x0, 0x0) 18:07:58 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0xfffffdf7, 0x40000004, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 18:07:58 executing program 5: socket(0x28, 0x600, 0x7) 18:07:58 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x519602, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001340)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 18:07:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:07:58 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) getuid() 18:07:58 executing program 4: sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x700, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x236}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88d1}, 0x4001) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:07:58 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) recvfrom$l2tp(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x1, &(0x7f0000001140)={0x2, 0x0, @empty}, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) 18:07:58 executing program 5: socket(0x28, 0x700, 0x7) 18:07:58 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x519602, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001340)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)) write$char_usb(r0, 0x0, 0x0) [ 269.933420][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 269.941928][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:07:58 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:07:58 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x519602, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001340)='nbd\x00') write$char_usb(r0, 0x0, 0x0) 18:07:58 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000080)="76cf6db8c65ff6e57bc0e87c9b9ea8fa0426413e98abaddc83c03974a57a631e2b189edabf0d8cf40d084fd53d87afbcbd7d479e1d638c926f77b8f6c8fbbbac52c2b841f4fff01217ef65a3805b9b378eb10ff83ea76cffdac593f3cca9a4b43c6d254db3b47c93bac71fa638ae311a000a1825599f13c629efe75d7423232cad2ccc5d0ba7018e86c9e57da0c82cf5e1b97b1e2922c4786fbb9636f8bc21ce4a4ec7dccad310ec415c7cb6f971274254ddf9a7ce6fe998", 0xb8, 0x5, 0x0, 0x3}, &(0x7f0000000140)) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) 18:07:58 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000002c0)="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"/399, 0x18f) 18:07:58 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @dev}, &(0x7f0000000080)=0x80) sendto$l2tp(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0) 18:07:58 executing program 5: socket(0x28, 0xa00, 0x7) 18:07:58 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:07:58 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="eb000003"], 0x4) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40) 18:07:59 executing program 4: ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000100)=0x1) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="6acc48919bf377fe2bcb0d9ce9dd445425875dbece3e4b745b3f7260678605b2a28899277857bf5a110796fe0805745f943dd5073654be43d4d7a318b6233d0b0cc75ab391dfc45bf8a4bb3b1561387453bd41e725316b605933f87c1524a1ffee9799c75a274606c8ca75ac47954e3c57528e2ec77868b0b6e134e87b756bf7be7418abd47d8f994cccb35ab447598a68cfadb901c74cb590210a50bf89c2c2abb729cb51e405b37e957d44c2bb507017e7aa1abb15bb2493101e0ee5402d2c97230daade139403db74a2fd61fb4e9ab479545e5358435c2163c9401606b62c6c6a31875201", 0xe6) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff8c}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r3, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) r5 = socket(0x37, 0x80000, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00032dbd7000fcdbdf250500000005002100010000001400080073797a5f74756e4000e380fe8400000000000000050004000a00000005000d00000000001400080076657468315f746f5f7465616d000000050005000100000006000e000010000014002000"/114], 0x78}, 0x1, 0x0, 0x0, 0x6976a44be7e74c16}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xebaa}, @alu={0x4, 0x1, 0xa, 0x8, 0xb, 0xffffffffffffffff, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x7, 0x0, 0x1, 0x18, 0x4}], &(0x7f00000002c0)='GPL\x00', 0xecf, 0xf6, &(0x7f0000000300)=""/246, 0x41000, 0x14, [], r3, 0x1c, r4, 0x8, &(0x7f0000000400)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x7, 0x3, 0xf37}, 0x10, 0x2d038}, 0x78) 18:07:59 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x519602, 0x0) write$char_usb(r0, 0x0, 0x0) 18:07:59 executing program 5: socket(0x28, 0x8004, 0x7) 18:07:59 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:07:59 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5e78}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x3e, 0xa, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f0000000000)={0x7c, 0x0, 0x10, 0x70bd23, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff80}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4000007}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x38e}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x24040084) accept(r0, &(0x7f00000002c0)=@x25, &(0x7f0000000340)=0x80) 18:07:59 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="0000ea8c"], 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') socket$can_bcm(0x1d, 0x2, 0x2) 18:07:59 executing program 4: sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10000, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x400002, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) write$char_usb(r0, 0x0, 0x0) 18:07:59 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 18:07:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, 0x0, 0x20040000) 18:07:59 executing program 5: socket(0x28, 0xcc02, 0x7) 18:07:59 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x48880, 0x0, 0x0) 18:07:59 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x480000, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000000)=0x2) 18:07:59 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$char_usb(r0, 0x0, 0x0) 18:07:59 executing program 5: socket(0x28, 0x1000000, 0x7) 18:07:59 executing program 4: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:07:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, 0x0, 0x20040000) 18:07:59 executing program 3: r0 = socket$inet(0x2, 0x80000, 0x3ff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0x8) r3 = accept(r1, &(0x7f0000000000)=@sco={0x1f, @fixed}, &(0x7f0000000080)=0x80) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/raw/rawctl\x00', 0x40, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xa4, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44001}, 0x404c041) sendto$l2tp(r0, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffff6e) [ 270.972586][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 270.998500][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:07:59 executing program 5: socket(0x28, 0x2000000, 0x7) 18:07:59 executing program 2: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000080) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="ffffc266"], 0x4) 18:07:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, 0x0, 0x20040000) 18:07:59 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x1, 0x5b5}, &(0x7f00000000c0)=0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000100)) 18:07:59 executing program 5: socket(0x28, 0x3000000, 0x7) 18:07:59 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000800)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"e42c9ea2c51218056255b61ee0658856", 0x0, r0, {0x0, 0x3}, {0x100000000009, 0x6}, 0x6, [0x5, 0x1, 0x8, 0x400, 0x1, 0xa6, 0x2e89, 0x400, 0x5, 0x1, 0x7, 0x9, 0x3f, 0x4, 0x6, 0x7]}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0xc0702, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) getpeername$l2tp(r2, &(0x7f0000000600)={0x2, 0x0, @multicast2}, &(0x7f0000000640)=0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfd}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x65b6}]}, 0x38}}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @multicast2}, @in=@remote}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x5) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d1c, &(0x7f0000000340)) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a80)={0x1058, 0x0, 0x701, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "377c54b9a66ee622258bc35a1f283cb606de22b05469f9113ef3d43c80bc31a0a78fe4b4d7d2bb260a8454cb24bfa1bb5fe67256c9cdd9dfe2529b78f6fa4e82e0b4eed6b88a061b5c0c58599fa0d41b3cdd9801d78366daac4397b657b9fbd8ddffde3a5b25e04c76afb1229c1ddbe1ccf550518c0335822dbb1682ba0776f312091c9d5148e8f18e6f73f0703a6fa8554035f0d7a3745b25e2972f6c085354b826b271f3d3e012c604e9153703cee53396fe65a47b2cabb22f5a3cc86e5870359658f462b679d3356bcd6367be0820aedcd01cfc9520232353ea63cb88d9f119077cd5e4ba0e197123c084b21f4e7352d00baf8cb429f325f1e3802718ba45428f47fe890db8bb51047e746d0427a5d2e96de4ae946c95f3a3f166317deddfc68a6ac9b1ffb98218c186388c64456dc648a57264b29afbb01bed31e138a7f9b471a094e641011bd4ae3a9d643bb02e1fab0fe6670e3caa516937d60cc7f80b86fddd52c4a1b958b02e74b1fb7887e2712a56281fc1b1696e17a15009c15e06ef5e42d138995959b339dd8ef1f607b58e2aa0e7f5cda487df64399f3b17552ee2d804bb5436b6afb4d7ea048f3f17e81c73c3107690656a8323500431e74249010943b25ebab226e2d2ffa7d0fa5ad6fa0560ea7f321dc0a974b2da0b1e8dd9ff6d0cb0587da7e4caeb86a154cdbd89ecf087d8d974157d5dcddb1b4082ecf85cf8e86e8304df189dc1b336449c2bcb0949c2af31ec028ec682838a8fe0642cc4335b6fb40518da6a29a4845cc02c498632991bfad2b6857ccc68218e63376cd0775ffa88cc8fc1185d133eb9d365f544a5ae2dc8e5bda7115b18c9a911ade8aa7364b6544d30623615c457ff487efee9a8ad32bbbdb3f84c846bf56d2c182e7255df2efbdae8bceec3e3c610aa7dbded61b40b9e12793bab4fb1d4884078e76a7d005872fbe9019438bdd8401033920b7ad9db3fbb1162f24c8e41bd8a18f5e7fbae1f3557dddc193446ed220cc80e3e525bd0b6933ddfe2f854b9ae47ed6cdf17a2b1326824ac2f1c6422157ac6e319355de354ccd9ccc6621bf3a9a82176af9f617aabba87dc8247e3131e0e68208e5a5e8deaafb09147f7fd7ba59c0c6162623e2566aabf37fa93e6ea4898001308954f5704d4283c2d558c6f0c36b1455102087ed509ec28a93d511b40ddd6893ddb26ebafb1c0b4b2fcdd3a577319a7848ca3383a81a00eab90cf85ced0b780d11758134bc0e32405277bf5d4ec28448953725e31743fccb9d2bdf75ab299de7718c743e195d698d7dbf4c4feb7a3322e8ef69a4da02e4eeae5ec1510396e97937a636767afa63a6acc0fcaa0381bb98fe9cc9d7df814c19167fd89ba446d89203e24cde0e6c14cf4bb854fae8013b86c8123946a0fecf019c08645b0b5fc7c977fff987fd7f0031069bc9f3a6ba9a8bb1ef0b21a0a7c8ea4b166aa32c1903ee972afd80a11240affd24b14fa6057692ad20dbd489dd69263479ece75ff720766c24dbe58846b68abac6ef108d67100801545a7d4abb8f327b4f6e13dcac09e36d8dae2f2eb8749f58458919e2dd63382264aaaf08eca5d76653321d6833f23f1473cd4243d0f66912f1a5f6533fc7cb32c860c19639a4d4daaacd8b50035ae77226f6d31e7fabc9922f44c5a911f6a56d61250107056eff5ea19ad9864ade8d7ddbcbe7f0b473fa902af9627be21190bf731b7b59811dc4f2e230e131f3705623c1b885a31f06046fc5c6bb6d272e0df006c1fa8c9a3af0fd78195fa2c3e011a218dc2a7e34b983fca950e85299d67f998d8719368d8843cce42fcb06dfdb42395f92f6e2b6c6eda33f323354ab7783a9891e530e7ed3e3e45bf6d21c26f95bb85a3c450857cb98ab7014c15636c511f09747f277c319a840fce846ccfb98b35def89974ae787f5543a7a0895e416f3e9852869c7ac70990d898769f074d648ee1b4355aa01f125473e1d9bee3e4a185306ca27fe3740afa781a63f76646051103838be1429fc8a2da19b90f674686b17fa045761d0fa4f9ea3e342a311b5d467dc2c101d02409ebd3247121b20b32747a16f740201af3d078877d66df3ff331630b7c7798bc1704ca24f7fa3c64c059d59b4cfc9afdaa3304f4b71e50b1e9f8a7444db57e617a8b039c804d9d5e6c8f10bbda62d531357d2ce0a647f4c030e15dff40203aa243504b99e334cb278c9ef033772882edfed5d8bcad68a3d4d8b65e6572ccf133e1f9c3956eee347adc17df1a0dd43d76967911fdb10211e003d11ea1f357177f420441af08ef167875aa269013a3f03c1d31bbeeda611a9d2ae2ed715d97c084c7dcdcec92d6f77077379c9efdd231338359f34157d830ea4b64d2eec427ea4c20b6696a23396967c71a56ab58379a35c77c98bc5684cf067c5e8b619331fe670529517bdd6200649e839027b24fcc2e9a6e1ff5faf461d5fc7ab04f3b345086ac22ebd8edb1635bf31fb77024df12e60ac1b1a2d9f730eadbe3c842cd33f75696cd27514f493eba08c00af754bd0b6d5764a4b034e4fa86364a4bcf3be6aa15da382cc20864690dcc281214b5d83216f1727359ad026bd18ac8b9788ea819e334fb32437380da83b3d8237e0e3b6fa142b97b598f9b2c3695fda4a1c1f020d5b5610e1f83daa079d99caa8f355b2f9cbc11463d5f76edcb9b0aa356ff3e105f175024df23251993d7c374d3a14484ffc30d9c4a0d55468d2cfdda60ef824feabd3a5a4056ba45820a54d85216405985d13084edd7f2f2f59da513f01f07b01a8a0a243945b5c53f4415b112fe0df807f8ddc1c81be4af65f37f38c582536fde820e4ff8b3ddd8025b2de653cf1fa95a81243c4ecf54f7696cf6a34351667fda88e4db6ab2413db69b5a840eb9ea439b50810b5c7c80649b008582ccf925e215592b8916d2e6f02dfab160420f5b009ee553bfaa29e7a45c3e30348f8c4e95491abc966b54e9662c2a5f64057528a6c41639efea62c331c47b5b1c70338c9de92c4655fba62dfa99c5a5b87e0496225653e241b467779bd15a379cebb06ffe73ed07aa29712b9e79698b3e1b7f812b0f34ef0dd247c7f9f14a3628e7a0937866f887a20b3842d022a40c18e8352df8e564ce380b42689a495428f5cca92dc09b8912e08ddded6a689fc33626941044cd4b46f8fe9b6053f02132860ea9bf92c0e4d4ca539f1254269c8f1d3597b386f238764fa6d1e4c823672d1cab7bba6bc910ea8e5f8738bbbe84c3a1fc7aec9c465721a031ef8147ba1527bc173fb75248c5a2fce8be7de5031f91ad351bc5537d837821840a33bceca7ab009b775fe2adc1d02bad5c8d43977bf6a0596f9f349f0acc5f706284d3410ff2a231396c7f3d913d8a3e33a07e3a848652712e3ffaf54ed1f789dfa1b330e31174f465afacfd8e80a54a19d08567f96d4b51c3e285f0e56161572cddfc28422203ccc49964600a67338052224aadca6db437230f34bb1f73e032a66578651f48aed9d95603ae4672eebbe6e3e174e5ffb82b27d9ca7cacd04f4004cbb80573431a3564a56f5b1d70261c23b4f42bb3960527522ebe55cd801fd7a8e5a0812477f00db8e69e442d92b6a6611666d2783f8032ecd43f3cfa94d865527a2e586497b4c1032a0627507b5be6e7b5c08ccfc63aba2538bf4a26866a17cd6de2d982575630888ba3d68bd370d562e336171a8effd0ba20b964d1fe1ffb0153f6b08d1f39f2c0ee79bd84e63711b1a03b6f9c93015b1c7d08cfbe9d9907bf973c7ebf07524b9710545421d7e7c970cfcfaee144548350654e91514e2bce32bd2dc3972efcd89f592ca0ad7cccb540930a2688a72878f56a5d7b99f951954384e6c608e7dde8c4c0f96102746f8760a0fe3d0ad8c7b370fbac56908827563381b43cab81ea699a264cb78457fac16ba2442191b15e9ab790b4a44a2a426de31da63e62dc7da6bacb94b7dd708b571a7907448d3c5f253ab0cb0213669ef90ffc60bbfb6e0b2a60ad70c84fda22b653bce3cd1c9abe48d247f8516e497af6473ba5e2be55d4e379b8f8a41ff0da0a2a21947f68a08ceee30f7edc4ddb7a41b92a079d45363a7a8a26eac94f605ea734bd127a742f1cb4de5c34d1df25172693f95a509759ab40136ec6cd71bb865884a59b5b0f6d3c6e10eb8ed8cc425cf2fd2dbc775ae2e0cbe333130f627cfc875c7555a9b937876b77d3f8366c0ced2e3a14d519192ad862e574a8eeb923388436c2be6b4c5b590b27beb64833f9fe4f2914d1e14f7ecc2c621cf83bd636d24027b8e8aeaaf7d3ad4b1f163218e5af269f68cb8744947d22331cf0be0c7daa94902dcb71ab1613a0b6ef87b42abda331bc92de268d3c16387c3d5f1275022185dcf17145bab39933032a2a1c999e1a26810bc2561037d023ee41a315c194659daa3c665978c47d2711380ec5243ec883efcaa3b8f758ad44d58254ab6f0382db5820fd80ddc568264ec962e45e27c6b0216215761228f020dfe484844d3a0cffdb53852917d114d078d3b9ed53dcd353c5667e1db2669dc5f9b4c219ab3d17bed63344d70559b29beb9c97e50d8178fedb5325e2c8f3294759f1917d1ca31e9ece758472ac1a86f4e0ed44678c522af81c72407d729ea6f01c7c13d7201bc36f1ff8c3b226a3021c92b0ae4989020504fe547b80dca7cf720677c0c3afe49bf0baa98f542e6d0d728d909789b85d13ee1877f4d35889ffd761af5189299a4503d2bbd0e8fe54ef86342893f09a9c585506902d1dc7a41c335950e1ae74936086c9c62d53076ed187b3a2e6ed40040249ba517ac836f66a38f3a6efeb35b096e3fcf70f31f5567ee8f5a18467120efd91d8b8dbf8eee9f0c8d4be92b2bf81de196c042f3210d071c267d736f2cdc730543a8136447febb58e897077d8de2ee6fd755ae6e6be3f5581d478900ff5267fd1e9ded1890d3fd43cc1d666e6456b28adbbedcd9912e4a808a48ec270a334cab19829c61ccb575b9963a6bbb62212aaae9db7cd50ebaf0db7dcaa54e01a7c0ec09cdc701d95076ee54fa5c010c68689617a53fe35b863134746ffae2dd09c13d50590c3a87e07cff2e7367f51adf0e249b0d6e2402fb195279617f8858227e96f17a39d1f67cb8051a32d646a266ddd800def3ed7149a5268537083fa9323b9ffee954e71e7859105a4a460f26beb99927786c226df499620287a5a1aa9d8e25275da1d9c6d0b8ffa2554b3f9693393d98249fe96ac881cf3f3fedb2b50daa75f252f5b4069e0f35f040bedf8873364db90a1daaf08fd13c6c697369c16a7b1d6c81813dd3f6b842a03292400127702d8f1e65eae4f7666230524bac40e0c1c4a0fd163e0c2030587ec28120faab034a6051e53ddeee028d36c1c930f92f56570151cd580b78974066c9ec4001d313be5f3e1b3757747a25a82e78ace923f8464b49f36c629e2ab6c38d77dcbd1ee3be24b8a026fc304fbafe02b9d0ba3d8e8ffbcf15455dfd5a2b1a3a9ef18a045970868da56c3c36ae713025177ee6d2b71dcd589701b7ee40d59e0143332de2f1374a97ee97cdef5f71e963c2e19507ed9b1096b591aafde21f8d07a0383b4efdcb40e46c31cf05c92c323b9444e96c288996ab066c53bc9bb7644d5ac50beb1607126528262ae3b68a701ebf82dfc897d1f2c0b6910a57335066db5836c4cac8aadcdd74a0834bd547acb8890360e0f09da91cddf4d973f3f3ae298d67a45ec26894f3f0374b133c66d5f221be0d6db056f273c62d2c9a36eb244e4f5723d79f3dbcafc0393c0"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffff46b}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x40}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xf, 0xc5, "11a6cec71e9e5e569be1c0"}]}, 0x1058}, 0x1, 0x0, 0x0, 0x480}, 0x2000c014) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c00000085256dcc1d4f77329aea3193a4b9cdf9fc37353e017d243650a68d544f465da04b7358f163898ac73cb283e8d81cab956270ec04e29df477e3b777003aa14ccf7daa7dc2c36f1da0f87111885cc5ecf5afd820eba63fecf25029f03cae8ad804c17f790803a212ac360a54e5c77cb674ef2afef10b378bf5a640cdada18f997dec4822624ecc2a071d68a6c5ae72bcd3ebb19009577e4738eed41f47c09b69336cb2ed7f4c9d7957e60608a92792ca0b7169b74d9b093b0000000000000000252f9f35000000d9b319470e8141b45284d39f6ac020d3da290da61e4244d9d69cd9a26436e0", @ANYRES16=0x0, @ANYBLOB="100026bddf250300000008000200020000009ea60ac12d819cb7ef4c7655cc74e68e4ef3a9898daea7b8ef53af36470802feba4fa3ed7fd9a84c688087d7c07efb3129331fba961ebb63c47b4df2d38d2d6b6bd482df46e07553bd21c0ae9f006d6a84d4748974211d5d7e0efd027b99073f044f4c9c05ce6a1680bfc6daafe4264000000000c0df62eabae1c0268b92cc87b65e2128289db1292dc6f0866f5631a7c437da131ff068395263528376b69a7377dd826a95a6ba80a8121566ec16bf8c1858328740afa0051b94fb228594ed2f4e45704094c331e7b2ecad"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000480)="f2863ec7dccea93594643a6301a94e4f0a8da43dfe6c54f7f318640ff6c8e2ff8b33add10a1bd9f0cb8fbb665bf4e8cb5d7aab3f30e77be8dab5409b0cb4dd1eeda9798af15ab9d9e5acd14572a71f7559567bffee369d559338d454a2068a646f60ec7341bc4d9c610567d2819782eff8", 0x71}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) 18:07:59 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') write$char_usb(r0, 0x0, 0x0) 18:08:00 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x3e1000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r0, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', r0, 0x80, 0x40, 0x3, 0x7fff, {{0x2f, 0x4, 0x2, 0x2, 0xbc, 0x68, 0x0, 0x6, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xb7, 0x0, 0x8, [0x9, 0x1ff, 0x62d, 0xffff304b]}, @rr={0x7, 0xb, 0xfe, [@private=0xa010102, @multicast1]}, @timestamp_addr={0x44, 0x4c, 0x1d, 0x1, 0x9, [{@multicast2, 0x69}, {@multicast1, 0x9}, {@rand_addr=0x64010101, 0x2}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x4}, {@remote, 0xfffffffb}, {@rand_addr=0x64010102, 0x7}, {@private=0x1, 0x808b}]}, @timestamp_prespec={0x44, 0x14, 0x2a, 0x3, 0x2, [{@rand_addr=0x64010101, 0x3}, {@multicast1, 0xe1d8}]}, @timestamp_prespec={0x44, 0x14, 0x4c, 0x3, 0x8, [{@rand_addr=0x64010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x8001}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x6, [0x9, 0x10001]}, @ra={0x94, 0x4}]}}}}}) 18:08:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:08:00 executing program 5: socket(0x28, 0x4000000, 0x7) 18:08:00 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d01, &(0x7f0000000040)=0x6) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, 0x8) 18:08:00 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x5, 0x0, 0x0) 18:08:00 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$char_usb(r0, 0x0, 0x0) [ 271.541820][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 271.553476][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:08:00 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x230, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_IE={0x10, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x60}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x1d2, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @random_vendor={0xdd, 0x2a, "1ff9c407606de711241af9ae6f87ed5acdf0f1a35fdf5ed6487a7b2fe2f247255fff0ae2287b3464d884"}, @random={0xa, 0xce, "87db3314cd17bdf23b543c8b559f54912b7707e60e82d8b55f729d3a0d2ea8bd4c94b6707a172c915be3a17a1290de06e4d8ebcde7ccb8a39c1d943ee60e0053c0029603d90bd03b0307c3ea700bfa765751225f65f2c903df553b142a142f121eb8f994eee1cdd6a469e25431b9391da337ef705ce7eea95f8a99a520cc06d3c272f7cada20453ef457bf815803bcb6d1bcbaec14cbb06938aec3c5af46b9f57afa5f73f85aae93dddf6149d5a4090adeb363ecb240803b78ea0fbf1d4676eced53a2eb08774ed1778b9ec79939"}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ibss={0x6, 0x2, 0x8000}, @perr={0x84, 0x6f, {0x4, 0x7, [@ext={{}, @broadcast, 0x80, @device_b, 0x33}, @not_ext={{}, @device_a, 0x1, "", 0xb}, @ext={{}, @device_b, 0x56, @device_b, 0xa}, @not_ext={{}, @device_b, 0x9, "", 0x18}, @not_ext={{}, @device_b, 0x7, "", 0x29}, @ext={{}, @device_a, 0x7f, @broadcast, 0x1d}, @not_ext={{}, @broadcast, 0x16, "", 0x24}]}}, @random={0x81, 0x44, "b9c2dd96051436031d846cb46acdbf0196a453edb26f7c75d63e66536873e720123de23415f48a0c49bb33ff79323c8f1f2b405aa767c9f122b6664a6326c0fbf712ccf2"}, @cf={0x4, 0x6, {0x4, 0x0, 0x3f, 0x4c}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0x40}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x230}, 0x1, 0x0, 0x0, 0x20048030}, 0x240400c0) 18:08:00 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x20044009) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x92, 0x9, 0x200, 0xfb99}, 0x8) 18:08:00 executing program 5: socket(0x28, 0x5000000, 0x7) 18:08:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:08:00 executing program 4: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x74}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4c329279d3f1e19730144ab04c955c17d48ce056ca677101"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "060eafec089e79038859febe169b0a3ef81a598aa948df73"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0xac}, 0x1, 0x0, 0x0, 0x810}, 0x4008000) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:08:00 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) socket(0xf, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) [ 271.848865][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 271.885807][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:08:00 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x2}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x3f}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x891}, 0x20004040) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, r3}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 18:08:00 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x327901, 0x0) sendto$l2tp(r0, 0x0, 0xfffffffffffffeda, 0x1, 0x0, 0x0) 18:08:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:08:00 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004081}, 0x4090) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000100)="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", 0xfb, 0x4000, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x10) 18:08:00 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) write$char_usb(r0, 0x0, 0x0) 18:08:00 executing program 5: socket(0x28, 0x6000000, 0x7) 18:08:00 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x111000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000040)) 18:08:00 executing program 4: ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x101}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) [ 272.222371][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 272.249060][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:08:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:08:01 executing program 5: socket(0x28, 0x7000000, 0x7) 18:08:01 executing program 1: write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:08:01 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x492840, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000040)) 18:08:01 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x4000895, 0x0, 0x0) 18:08:01 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') 18:08:01 executing program 5: socket(0x28, 0xa000000, 0x7) 18:08:01 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x2000c0c4) socket$inet6_udplite(0xa, 0x2, 0x88) [ 272.534883][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 272.568568][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:08:01 executing program 5: socket(0x28, 0x80040000, 0x7) 18:08:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:08:01 executing program 1: write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:08:01 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:logrotate_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}]}, 0x80}}, 0x0) 18:08:01 executing program 2: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008080) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) exit_group(0x7) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x101081, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000180)) 18:08:01 executing program 1: write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:08:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:08:01 executing program 5: socket(0x28, 0xcc020000, 0x7) 18:08:01 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') [ 272.831562][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:08:01 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = accept(r0, &(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000b00)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xc4, r2, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x37}}}}, [@NL80211_ATTR_VENDOR_DATA={0xa4, 0xc5, "ad05031ac1528019e32c0b538b4affc5b201b5489a052ff053ff28d7e2cf0ab83f6243e802600b8baab25e7f1f9c0546f45acbce30fc6e758aa342b1c1135d002b580462117416663b015a47267eb407307d9ca364683dcbf4c2ed9a5077f95b66102de1108bbddcab9b9a61a5e56064a4953c6f998533b514578c9da2fc7ab19f5285c92bf97834c4d218fb233cfc78a462a746431f8443b5e6e0b1ad2a0cf2"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40002}, 0x1) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x40000) 18:08:01 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = accept(r0, &(0x7f00000000c0)=@phonet, &(0x7f0000000080)=0x80) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001840)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={0x44, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0xc080) 18:08:01 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$char_usb(r0, 0x0, 0x0) 18:08:01 executing program 5: socket(0x28, 0xfeffffff, 0x7) 18:08:01 executing program 4: write$char_usb(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/231, 0xe7}], 0x4, &(0x7f00000012c0)=""/143, 0x8f}, 0x20) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd7000ffdbdf250900000005002e000000000005004300000104000008000b0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x60008000) 18:08:01 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) 18:08:01 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$char_usb(r0, 0x0, 0x0) [ 273.112978][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 273.125756][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:08:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:08:01 executing program 2: syz_emit_vhci(&(0x7f0000001840)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "66e933b75f029264461bb2e959862fa5faacd15e5f8ca22b533ee3661f1d78ae27daea0c8d7df043c6037ac4efdc306223514fb9620b1d17417d4e5936f78b29e184330259b2ff2d9e5d3bae60a523b68fe3cded752e074e4e1c4bfa993ab8f116b913a48b8b1d62ebc5b1a3507034ed1393f515726205ffae617b2c2294e917cb7f77e129b1a7699532ea58ce2ff3b1aba92da95bcb950ad3728586f05e83569603c501f6a082846ae71035afd77f573b97679ee3cb8b1581dff022b9a6918166e595d23ac552c52df67353d45148416ea95b356d7e1e6fd9ed4a6cce66003bbc1e17d240ae60a336ceb702a6ce9c6907ca38451ac5498bea730a806586dbab36143f4d6c839a1d420ea0c86f47d90abe7e6372d76bf1a3c54421c96f7bc00bd430ecee92fe23a30db776183164139192f366962e2a4c7e51de2a6df03f4c3bec3a6059eb85a7e635bc4f2517be9d7179577a8a1a08814801400858add9fc4c10088bd60d8c9ca3be3c45636017ec003641411bb6537263eef7f44f6ff984729c70975898464acf79036932268b691f8ed477ed8572ba82977bb9407663ba87f02f4e5523236eb6d422d539ee5013145e6382368f842ba01a7e3b3a3da800c010744558e455f544d9a55ff66758d6da7b1bbc96edc6a0a344cfa2e952274e3f67de7346f67d256553263df79c9f6ab94a7df08660f5d9b86a2afbce08c90065bbd27f5e822d25d403418c004469efa9613af4770bffed05b36df378e853379d3795ea9174e7920ae0ab926501c4f738339a27969c8bbc25bc4047e99a6274e8243b787017a2569cc28c8ba3229d6ff700643ad1b97ded3ccb786ed549032a045bad0ed98cac6dc863b42962dfdc7ef6f8e166ea63afb8f0e2a2a26581d9c614db204ece99a796386669bbe42b9f5ca7c3eb2afa64b55d8b4cc85da02ab2b54aa4c1d7d0a085a058dfd32a19e69a1a4a6abe1cc3832b71bcd31f1d6e73a6412ace71070dc2ace61765cb218cab72951454058ab8baea55a3a555d1818a5170a25af3fce647953036d52e27711846d8f9e89587cf128b88f9d7d9ad2e5520f500bc107ee626e27a449f7b60aaa687213cfc2270632a0e42a6b4f46346a7d5ea558ff70d2e3d5ec51bfc27c0c7c93094a54792ca570f93566cf82b1761cb0100b3564a6c6845fc2ff3f37442eeb837cc7cb25d809236602d400fcd0df129fe49a60c3fb2a654549b304a6b40de1c220ee982be1fe6457e4f320d857d98dda0e85327e5d0f9e98753c5a758bbd3c9946a590841b67cf9e525e71691d6ac2378db49e22445167f0b9c93489ced745ec8232ea21f4bf1d822cda299e72bd7f2e2e72a53f5942a5020ce30f919837e8660a6786b0f8cbe60340fd40f5a1a918630e43184eb5d22ff05b9cea70e88f80cf471fe77d1e182590117c8b28f6f9ed5d3cec92936eaaaf380425c1bad129b7e693453643f460d6b528294c2dab69e52a74831b0427b55b920521c4c14eacb9f7db066704c8dfbf5de0109ea9f1013ef176ffc83bbd9c1d435f8aa933522b40036bb4a3046d1cc5e1fb4991eee434bb8b99c874e32bb03bf5b3531829ccd515a18a7abe100b7bea642594e9d3de4283153c0457e6c5094cdd8882fde9feb7f5dd5d81ced4e7c6c85a6ac1005ef4255363e7c8f9480b1ce1e5081e874a234f949936fdbae1cf5ff946d47670bb771367889cc7fdcb1f9d89d46eb3156c24a0ab471d9df0cbae0f8da0910b0d29c7e04574c758298b9de2666f76d763eca3e4631e2d8a81daee6c1d85c90069605aeb2abc13f15bf4ea28207fa5af69bdca85638ef1e388746fa6ed6643d167c391c8642bf9303c46b4c08ba516ae85fe3676110e8bb9c373afa363f0ec3f8721d96751d0f1f0a596d32d5902514d7381210285ac71157910a8aeb4c5c2ed083406378d5f537785aaf2df8afd86353157f98e9d2d9f598aabe95e6120202ea25e5e37427456d36a2ee2ff41c6c5d56755d05ad58c6f807d849c45f272445805af600b6815d882e675ab7c169b4999f8448ddfa8c02ba2eec1512e82f4b9091b581935df7933a7c1a60c34a532f9d92d34c958d5887724f3dfc973f56ec79f8b7d45b27ab9cc400c4dcb3ca7f2dceb7088d704898c2a67dc34f35d80b8bde8407157661be0c2cbacc62c466cd74f0d9a2847a0d7acff0e1350b3f7ba4d59cf3dec7b49b381f1a722e1c704b8ea595362fffb7a2e6e837ff12512aad3dca2679427a75ed91f4193f88945df93bf9dd6b07fa16a26a8e0d96dc3bef8cd7a7eec766a8b1e6fc28913a8e7cb57e6c8fb94a7e96dce2e20a499bb7a1bc984a326d252ecb1deb901b0aa6da25134f06651f4eff10b182f2d7abde8330e924d21e7548f58671f4c5c7c27cc3b10a989520ced8b67dab00ed3ca8b975382715e01d4eb88dc79396b4288a0861a819d144657d122d82d3ee769f3e1b7cd11e6a8dad7d3acfb774c6e119ccf0bb8e906517df1c5798a253b9fd83b9b24f404938702b3ed4a74be3a68615513afd751e54288d7353263c0ec0f52ee7dad7c26158d314dbfb9014baf297474ecc922ee3dcc19007f2b628d2690c11ff272c0f154a549f5568d2ad040eef5b6bd0b8f17890a4ab40644480c0a6d06a9d36ee6e563556ccff7471b6adc164a9a4cde57fbdf786329e89a40ffee9d61b61198089eb8be2a9a535839a1c1ea1760d0e0604aa77eab51acc09952d2dd34bb741e0d55c535eca5e916c9586ce9112e1054bb506794ae7f5ae5b06aecbbcd71f54864e9d57f5c4f152181af680f624b50368a230d6ee4471633726b0666fa9c134c7f68e2bd4464fa2f811f7fa33e4d6e10aabc63bd6ea03f398d565cc8dda20a43a80edb8895d5f774d9859d51785b1200c0602b2ed0acbc21c85456fa940443e50105d4da0b91f29d4ba9a065330aa023a9b0cb58870a6af4725a2137909968cc82a6d3ac93a88bec712507d06d112c403dfd9947823575ef542f59dd195d92e20eeca831b832f4879bbe27fb3fc256999b3d423a946a5a2f8ebc32791558ad9d824fa61cc22257d5159aa3609f08d8f36f0d47a3178e0d4353a3d0307d976205f30b1e841102f5c477f83bf22ed8a3fd63ecf974c3b36658c8337f05d9fa9be403b42dd2138af5b560cecabf34e11add13ccc0ae6ae0e6fe8f5fcd98a3fbf6ca5243b7b095b69a02f541140817a4f9c5adb469591f3954eb3aa93ead1dfc25911f3d099594c33f97909ca2b944f56e456441883d9583515f5f8994611bf3e2658341be3d03cc2598ab01bf9983349a5e669e1a1b21dcb4caba8a810a5924b26d45906996206ab7666bcec832c46fa521a598f8519e69220601acc4d00bf8361054d184ac0b6f7fea9d9e97cb223d0d6a43e43f2118fd65684887bd8ad9bd6fd2bfb0ca738854235b6b3de5a6edf221d08bc01bcf1d415dca523c2b7480917b99e4b3b291986e0b28239492c5f72a92e11d7c05593817473dd08255329bf2479ad2d7325634cb0a71b39459c99026d8e3dfd32c80fbfc2536b55f6c2c654679136bcc8afb38ce4920905139e4f974dc5704f9c2530232873365c81e48b38bc3071b62ea45fef8402e4397925fcb3e50e0e176d1a814efb8eff28d48602b3a4dd33f49c0e47caaa4e30eb798f6ac6c3a6c9880b0a2742a0f97f3a168ba35a68109c7595b6e802c0c45da3a2dcf47b7356d29b94dc8466f9434ccc89795d4deb34d2081219e2785de0b9b9efe3d3b2df9067080006548b791484ef4992bcf66121e7018ce3ab30b8ab111e8ecf08589d119838b09418df358a5b58c65764056bea4775f6caf77a92dceff6a0c8885ace1b9978dfb44c71e5d6f578d61bc238a1ca1ddc5bdcd8c3caee2fbf87d94f4e29bd2c81501d6c09efa992df61d6f124dc45b3385fffeb353c13ac168c00b353e49d820b36f927946119cd46081a77c5b7adf62137dd355f806ff2b91ba3d11677936e404e7be0955411851b2ad6c4a672254951f58f5230aa519aecd3c8d51361751a00fe82bd563a93432cc503ce293368cb0403146591e2cf4d907b9805f3f6c3ece20a27a97e51736ff18d74bbb7d5844aa234ed28b860734c16f71ec9b4324179eb8bec71178e52d9520001a312d938c483ebd14216e403c49fe9e2c6069b488ac9a33e00777d6453b92f3461547e726a9ed2139ac3559b4747dcf39e5e578644d6fb0fb1899bf3f7bb44a1880cbcd369b2c29f6b446f8fafdff4893e930f450861ce6d6baf194e77ab973574264b55b8382988a3af3fa65c7039d0b61441e402b4f451d30012e2366ecdd409ca0c83e9bd3550800746e3531773678d21f4c984b777cb5faad35d77180d4463f58f25c0e266b1c8903c6f4bcbb8c3d93134af237b19044e158315a790ae9a1d3da49831e2afb20fa1e8439856ca159b1befa3b8672a34378d05192bcf7506d0c123687a1b866a162d8035ade8168a27a0c5e39cb7bcb63b2346609b219df9d26d91653615f9d2b61c66be3e52e16ac866b8a3c1d08d1313e310643edb2a8c3c2f1737be207f8c41c03cdb07f69624b0d4aa510dfe7b567a9407a168d0c13a408993298e57f0de880e6954ade79e1753689c24db69b8162be458f47ff871b17f9fb4f64794447a9e245a2a6d057aa08d1237e48d69cd4267d8399aff23c89ed521fe885af97feccb66dd01d9d737562fd7e6a6fbc87281c166de3c5c2a32359f2eeb12a5e094508e2998021cfef15c938cb3bca71000d2bbb839ce4faca1aae7b577e7e7837b043a8b28302b339062ed01db27a468dcd74670bbb58aa17141db53c8e6c5ef455f94b8fcf7d24772471d485492a9c89667ff6b3f0651d7bfdb3099c60e3592460fe6e675e14c6fe9720d33e2ac653598b628f1b0a9eb0356b094fcce84a8c5e4f3a5f6b25ef5b973308033f2031ac948280a9234abcc956a52db8559f4f342eca40eda0754b75fee8aee72cb0c14194361f5176142a7ade941292da061a8c73afb2d10e81d9368da37b71be83fbfebd345f11b88aee49c3adcf40c84a1835f7d6706bd7480e2db1766fc2da7435f55083075675ad4bc1d78bf62ebab4f58be68ddc531f58d1b51b370c8af73f474744effffa87810aeb4346683dee16cf4d199a481fa5e963f887d57be28997a9cdcd44f054c6e5f9ff9079a2dfa85c4e5d9b95cdf8d540eccfe08fe63d01d4d9e3dbba50a6815730fe08bd63dac6e1575107a5ff73cdb8ad1099a980d6549ea8a4e9795246afb1d71fb0a06afb2cc148e15e8a757113549ffb518f1cc84a086ecd2f91c80aa10de2d6bc044f2a49c6c1ea1335e568ac8e193e31f92f3a069f6acb0f828c8553aa3755559c0f780d801220eecfa7e5cd59f958818b1a8e2d0613136db4ede3d7426f8bef51766ce53a65f3e7714062ef790a47bc1eab19f5d92a0feb6f7fc0d5fdc51a31657f09056369a4f33913fdfbb07bc5b35cc27ff1087b911d594c21e2575868d0233107da5bb89b8eeec245ad2e5152854c178bac36ed6c213017cbb955eba07275379bdb1f4731cc8a0b5e24e4736d64f377213a0818d575a7ac3bdcab138ff33a82c4fe2c22e328d49cea36b3272013c1e62f169152576e33517310b2a3673b4824d854d316d0553d1214d9a2750025df8088ad9707d6bec2f1812c7bfea71f7f344946b657632328ed47ca1e325a0b2dd8d46364634b50833c9959119b852bf4f2cb9af9e88f3c0de0e3d3687125ec766f4da2c3d37bac514eb2e05c1a3eb39adad7767782615298045919b69df6cee754b59d16e"}, 0x1004) 18:08:01 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x708, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:08:02 executing program 4: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x341480, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) connect$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x80000, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80) write$char_usb(r0, 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000080)=0xdc) 18:08:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:08:02 executing program 5: socket(0x28, 0xfffffffe, 0x7) 18:08:02 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$char_usb(r0, 0x0, 0x0) 18:08:02 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03000000cd9c70402e"], 0x4) 18:08:02 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x4004040, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4844}, 0x80) 18:08:02 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 18:08:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:08:02 executing program 4: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x1) write$char_usb(r0, 0x0, 0x0) 18:08:02 executing program 5: socket(0x28, 0x100000000000000, 0x7) 18:08:02 executing program 2: ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f00000003c0)=0x5b) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="5d00528a"], 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2cc, 0x12, 0x20, 0x70bd2b, 0x25dfdbff, {0x2c, 0x81, 0x1, 0x7, {0x4e21, 0x4e22, [0x7f, 0xd0, 0x4, 0x8], [0xfff, 0xa4, 0x5, 0x6], 0x0, [0x6, 0x3]}, 0xe8, 0xdfb9}, [@INET_DIAG_REQ_BYTECODE={0x52, 0x1, "be4936c7ccbc6c2194bdf36f5bc361e209a232d73cf6eaf0b1c3b076f08afc5cac56af140070a51f632353ebccb575a43aec1f89e5490a5aa8831c647718c0efbb521f621d2620770577bcdd0531"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "a92b556fc9d59fb1e019e7c5f00fa206bc0c6f1b6da745a1c03dd9014002ccb46a1a0ca6d66c95012685a3bdbf7a3bd82f86"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "4542c92992ee2a42eb4019d03477d3782c89a29e1ca21d71030fff3dae32433bb6e82a8ffc45844a26261ece8e1b50295eb4d7579b607e0d8c1ec21774669a7abeb233a41c0a148af73ed22ed17305207f79fc5ccc0f26"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "413c67df7ac1b23420fac19620c5d48252da0745305ddb7205d6e10a3b6cd6e210708f0f9e930fdb16a4b08b89871e5a93f19b9caaa624113b307ba5e0611c63b200cfd8e1f312812239e42c327bcf56d7d7d5385102a6113f40f1aa32e431ababe1146d02f1316c263f4e7a30eddf62766eb0229a9cb374857cae0626cd389469877c3f27502dfaa518d6d0529d89d3c06694cd7aed778a33c2abc3a85193b93434fbf501b2e1f5793f50c35e8b3fe4a3257b05bca94150a818aa887ddc83afa16648c4855b100ec4"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "63bd00e0abc17c7c6388e84a1c2988350ace4a54f41a5143a77911a8b62c4125cc1903fa748613ecf31017172ea1798b0c3238c06f78366102290d077103f17cb019468535dcd50781874a1480885d3d0e54c0fe8867316e25ee5215e91af2763b91a623b32c028d4ed14bc45d44d46c204702eef33dedfd5c8e6dbd6ded937a040a1ac0cd1c3f51f9413c9e14a3fbc6820aa24a812050ecb45394980f39de1e5203486c07fa50b07aa2ee0b0be751819d55e5ca74837da656a65db9a4f0177efb45df"}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dri/renderD128\x00', 0x5601c3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000480)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x18b00, 0x0) [ 273.703563][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 273.712357][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:08:02 executing program 5: socket(0x28, 0x200000000000000, 0x7) 18:08:02 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0xa8602, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x3, 0x5) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x20008091, 0x0, 0xffffffffffffffe0) 18:08:02 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200000, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x4) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, 0x0) write$char_usb(r8, 0x0, 0x1) 18:08:02 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 18:08:02 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x88142, 0x0) bind$l2tp(r0, &(0x7f00000002c0)={0x2, 0x0, @private=0xa010100, 0x2}, 0x10) 18:08:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:08:02 executing program 5: socket(0x28, 0x300000000000000, 0x7) 18:08:02 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) [ 274.102214][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 274.110820][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:08:02 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x9, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2}, @alu={0x4, 0x0, 0x5, 0x4, 0xa, 0x30}, @call={0x85, 0x0, 0x0, 0x2}, @generic={0x81, 0x8, 0x8, 0x4, 0x33}, @call={0x85, 0x0, 0x0, 0x91}, @map={0x18, 0x3, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0x2, 0x0, 0x8, 0xffffffffffffffe0, 0x10}], &(0x7f0000000080)='syzkaller\x00', 0x152, 0x0, 0x0, 0x40f00, 0x4, [], r1, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x2, 0x1, 0x7}, 0x10, 0xffffffffffffffff}, 0x78) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) 18:08:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x0, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:08:02 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 18:08:03 executing program 5: socket(0x28, 0x400000000000000, 0x7) 18:08:03 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:08:03 executing program 3: socket$inet6_dccp(0xa, 0x6, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x9, 0x1109, 0x1, 0x4, [], 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="18220000", @ANYRES32=r0, @ANYBLOB="eb00000003000000"], &(0x7f0000000080)='GPL\x00', 0xd9, 0x3a, &(0x7f00000000c0)=""/58, 0x41000, 0x14, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x4, 0x6}, 0x10}, 0x78) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 274.391095][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 274.398946][ T8496] Bluetooth: hci2: SCO packet for unknown connection handle 0 18:08:03 executing program 5: socket(0x28, 0x500000000000000, 0x7) 18:08:03 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:08:03 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x57}, @void, @val={0xc, 0x99, {0x3, 0x2a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40c1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{}, {0xc8}}}, 0x6d) 18:08:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.]{[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) 18:08:03 executing program 4: getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r1, 0x80, 0x0, 0x8, 0x1, {{0x9, 0x4, 0x3, 0xc, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, {[@noop, @noop, @noop, @end, @noop, @generic={0x89, 0xa, "d5ce62cd901bc424"}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="f40000001300000426bd7000fcdbdf25270008f56c234e2200000000008000664dd3656c51a2080afbd4a3b3931a9384cfb4356862d9000700000009000078fe72c6ff", @ANYRES32=r1, @ANYBLOB="00ff0700000000000104000000000000a2000100293ab4ed62a3187cc4bbca9a8357e888aeeecef198993d4a4fe90bfa6a2a578cfa9bfd703c1c127b355d78789e1732b580cdde731b2604b857786d04a04459f4c5f00c79b1aaef0d1215efcdf70694fa133c6a7f208a5e222122e2f03ba114e850e034d116e52c3d983a1052c730346a27d9e721bfe51db7e1a7806315831d5f10d4936f023109d922e1b7f3845df150cd1aa918a3de001daf99e61ccdb8000004000100"], 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x800) [ 274.667367][ T8496] ================================================================== [ 274.675792][ T8496] BUG: KASAN: null-ptr-deref in amp_read_loc_assoc_final_data+0x117/0x1f0 [ 274.684386][ T8496] Write of size 8 at addr 0000000000000030 by task kworker/u5:2/8496 [ 274.692553][ T8496] [ 274.694884][ T8496] CPU: 0 PID: 8496 Comm: kworker/u5:2 Not tainted 5.11.0-rc2-syzkaller #0 [ 274.703394][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.713575][ T8496] Workqueue: hci2 hci_rx_work [ 274.718342][ T8496] Call Trace: [ 274.721636][ T8496] dump_stack+0x107/0x163 [ 274.726421][ T8496] ? amp_read_loc_assoc_final_data+0x117/0x1f0 [ 274.732602][ T8496] ? amp_read_loc_assoc_final_data+0x117/0x1f0 [ 274.738778][ T8496] kasan_report.cold+0x5f/0xd5 [ 274.743676][ T8496] ? amp_read_loc_assoc_final_data+0x117/0x1f0 [ 274.749868][ T8496] check_memory_region+0x13d/0x180 [ 274.755014][ T8496] amp_read_loc_assoc_final_data+0x117/0x1f0 [ 274.761029][ T8496] ? amp_read_loc_assoc+0x1a0/0x1a0 [ 274.766259][ T8496] ? hci_conn_hash_lookup_handle+0x146/0x2d0 [ 274.772360][ T8496] ? lock_downgrade+0x6d0/0x6d0 [ 274.777319][ T8496] ? __mutex_unlock_slowpath+0xe2/0x610 [ 274.782897][ T8496] ? wait_for_completion_io+0x260/0x260 [ 274.788486][ T8496] ? hci_conn_hash_lookup_handle+0x1ad/0x2d0 [ 274.794495][ T8496] hci_event_packet+0xed9/0x7d60 [ 274.799461][ T8496] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 274.805471][ T8496] ? lock_chain_count+0x20/0x20 [ 274.810344][ T8496] ? hci_cmd_complete_evt+0xb9d0/0xb9d0 [ 274.815930][ T8496] ? find_held_lock+0x2d/0x110 [ 274.820725][ T8496] ? skb_dequeue+0x125/0x180 [ 274.825346][ T8496] ? mark_held_locks+0x9f/0xe0 [ 274.830135][ T8496] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 274.835969][ T8496] ? lockdep_hardirqs_on+0x79/0x100 [ 274.841212][ T8496] hci_rx_work+0x511/0xd30 [ 274.845661][ T8496] process_one_work+0x98d/0x15f0 [ 274.850753][ T8496] ? pwq_dec_nr_in_flight+0x320/0x320 [ 274.856162][ T8496] ? rwlock_bug.part.0+0x90/0x90 [ 274.861123][ T8496] ? _raw_spin_lock_irq+0x41/0x50 18:08:03 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = socket(0x1f, 0x0, 0xffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7b}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040005}, 0x4008000) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:08:03 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 18:08:03 executing program 5: socket(0x28, 0x600000000000000, 0x7) 18:08:03 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x215bf4b6e68a78e9, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000081) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x20000, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, &(0x7f0000000180)={0x1, 0x7, 0x0}) [ 274.866190][ T8496] worker_thread+0x64c/0x1120 [ 274.870944][ T8496] ? __kthread_parkme+0x13f/0x1e0 [ 274.875987][ T8496] ? process_one_work+0x15f0/0x15f0 [ 274.881209][ T8496] kthread+0x3b1/0x4a0 [ 274.885300][ T8496] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 274.891217][ T8496] ret_from_fork+0x1f/0x30 [ 274.895716][ T8496] ================================================================== [ 274.903783][ T8496] Disabling lock debugging due to kernel taint 18:08:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) [ 274.938240][ T8496] Kernel panic - not syncing: panic_on_warn set ... [ 274.944884][ T8496] CPU: 0 PID: 8496 Comm: kworker/u5:2 Tainted: G B 5.11.0-rc2-syzkaller #0 [ 274.954798][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.964866][ T8496] Workqueue: hci2 hci_rx_work [ 274.969565][ T8496] Call Trace: [ 274.972849][ T8496] dump_stack+0x107/0x163 [ 274.977195][ T8496] ? amp_read_loc_assoc_final_data+0xb0/0x1f0 [ 274.983281][ T8496] panic+0x306/0x73d [ 274.987231][ T8496] ? __warn_printk+0xf3/0xf3 [ 274.991837][ T8496] ? preempt_schedule_common+0x59/0xc0 [ 274.997309][ T8496] ? amp_read_loc_assoc_final_data+0x117/0x1f0 [ 275.003491][ T8496] ? preempt_schedule_thunk+0x16/0x18 [ 275.008875][ T8496] ? trace_hardirqs_on+0x38/0x1c0 [ 275.013985][ T8496] ? trace_hardirqs_on+0x51/0x1c0 [ 275.019092][ T8496] ? amp_read_loc_assoc_final_data+0x117/0x1f0 [ 275.025268][ T8496] ? amp_read_loc_assoc_final_data+0x117/0x1f0 [ 275.031428][ T8496] end_report+0x58/0x5e [ 275.035587][ T8496] kasan_report.cold+0x67/0xd5 [ 275.040341][ T8496] ? amp_read_loc_assoc_final_data+0x117/0x1f0 [ 275.046491][ T8496] check_memory_region+0x13d/0x180 [ 275.051625][ T8496] amp_read_loc_assoc_final_data+0x117/0x1f0 [ 275.057597][ T8496] ? amp_read_loc_assoc+0x1a0/0x1a0 [ 275.062790][ T8496] ? hci_conn_hash_lookup_handle+0x146/0x2d0 [ 275.068789][ T8496] ? lock_downgrade+0x6d0/0x6d0 [ 275.073637][ T8496] ? __mutex_unlock_slowpath+0xe2/0x610 [ 275.079180][ T8496] ? wait_for_completion_io+0x260/0x260 [ 275.084721][ T8496] ? hci_conn_hash_lookup_handle+0x1ad/0x2d0 [ 275.090695][ T8496] hci_event_packet+0xed9/0x7d60 [ 275.095628][ T8496] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 275.101691][ T8496] ? lock_chain_count+0x20/0x20 [ 275.106537][ T8496] ? hci_cmd_complete_evt+0xb9d0/0xb9d0 [ 275.112102][ T8496] ? find_held_lock+0x2d/0x110 [ 275.116858][ T8496] ? skb_dequeue+0x125/0x180 [ 275.121470][ T8496] ? mark_held_locks+0x9f/0xe0 [ 275.126226][ T8496] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 275.132026][ T8496] ? lockdep_hardirqs_on+0x79/0x100 [ 275.137224][ T8496] hci_rx_work+0x511/0xd30 [ 275.141631][ T8496] process_one_work+0x98d/0x15f0 [ 275.146564][ T8496] ? pwq_dec_nr_in_flight+0x320/0x320 [ 275.151932][ T8496] ? rwlock_bug.part.0+0x90/0x90 [ 275.156892][ T8496] ? _raw_spin_lock_irq+0x41/0x50 [ 275.161920][ T8496] worker_thread+0x64c/0x1120 [ 275.166600][ T8496] ? __kthread_parkme+0x13f/0x1e0 [ 275.171962][ T8496] ? process_one_work+0x15f0/0x15f0 [ 275.177328][ T8496] kthread+0x3b1/0x4a0 [ 275.181419][ T8496] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 275.187307][ T8496] ret_from_fork+0x1f/0x30 [ 275.192364][ T8496] Kernel Offset: disabled [ 275.196823][ T8496] Rebooting in 86400 seconds..