a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED]}, 0x1c}}, 0x10) 05:32:26 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x7, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x3, 0x1, 0x5, 0x30}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9d, &(0x7f0000000140)=""/157, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0x9, 0x80000000, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) (async) r2 = eventfd(0x81) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1c, 0x9, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000008000000000000000300000018400000feffffff00000000000000001832000001000000000000000000000018230000", @ANYRES32, @ANYBLOB="0004f3ffffffffffff00000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x80000000, 0x1000, &(0x7f00000005c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x7, 0x3f, 0xc1a1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001640)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, r0]}, 0x80) io_submit(0x0, 0x3, &(0x7f00000017c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x4, 0x2, r1, &(0x7f00000002c0)="629e98fdbe74f36f7bd2beb9e394b07b3971611889a9434aa3fe0df000ac59ae2abd473b9afa610b9d5cd6f4e0c6b69f018f07c1cc973e70ebf235d31800fadde78cdcc3d4c15215a3c9bc38c8c23e2334866955440cdb9bc84321e43eaad5b8310cdf5d457feedfece72493d1b558feed095baf70e2c8de643c332b0b26ec8452b1e7a271c1e75436968eec27e33d3c2c2af6ff7c72f5bcdc8e30edde752468c161f000a1b34e94b3d96d11b798238284dd164007177942e93284c12ee03f43550f7da36cd2061e908ce518d2f9a0c19a21490e2a0e44573ef7ede2", 0xdc, 0x3, 0x0, 0x2, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x12, r0, &(0x7f0000000400)="eb529397d199cce9df9362b9db6853b3318307d403caa96919959f143413af119089d4309b1c71fd346fa81b64e26dac2204de59f10743e19da04d29da6a57c0877037c912135dc663d5a3d0d8c6ffd5128f76870a8ed92539a75e16f5ddd02f4a31872504630faf5b9861fea9084328eb63578016fd10a7bc9afe4f4fd970d40fe287c3368338e39cf54099a03f6d06bc0a", 0x92, 0x80000001, 0x0, 0x3, r2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x899, r3, &(0x7f0000001700)="f7856097de1c3c0f922f4f3147d3dacb70a7611d9f5b44bbadd3c68b64865db98bb45ae79c9d61b4ef51697796db7ac53422756db7b4f53a7787cc49c990cc5b5bf460460f74efabb1b0bdd690c3081a52bf4583f1773568032b9394447cf0523f6f9cb2e32e3c0b1f0b", 0x6a, 0x81, 0x0, 0x3}]) 05:32:27 executing program 2: eventfd2(0x7fe000, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x12800) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0x9, @output={0x0, 0x1, {0x5, 0x6}, 0x27, 0x5a21}}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) 05:32:27 executing program 0: r0 = eventfd2(0xffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x43, 0x20100) io_submit(r3, 0x3, &(0x7f0000000080)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f00000001c0)="f56f77e233798a0275000000000013004ee73aab576e77a86c9a7759ea4ec3a24b04b0e99f74ab9c4d612facfef4af6dfc255b263aca8de5f6eb631a0c5a20f756ce8ab1ca8def33a37ad6b10189df12bb0e06bc5ff2aceb9c9833f6b7e4163ad8eacf5270c1f8ae6bcc7d3a3e99dae2980314316b7fe49b6e1de99519b92328e20f27dc0d4b98ed1db5ec0796", 0xffffff0c, 0x200000003}, 0x0, 0x0]) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r6, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) io_destroy(r6) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2, &(0x7f0000000000), 0x4, r5, 0x6}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4008af14, &(0x7f0000000280)={0x2, 0xffff}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED]}, 0x1c}}, 0x10) 05:32:27 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x7, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x3, 0x1, 0x5, 0x30}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9d, &(0x7f0000000140)=""/157, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0x9, 0x80000000, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) r2 = eventfd(0x81) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1c, 0x9, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000008000000000000000300000018400000feffffff00000000000000001832000001000000000000000000000018230000", @ANYRES32, @ANYBLOB="0004f3ffffffffffff00000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x80000000, 0x1000, &(0x7f00000005c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x7, 0x3f, 0xc1a1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001640)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, r0]}, 0x80) io_submit(0x0, 0x3, &(0x7f00000017c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x4, 0x2, r1, &(0x7f00000002c0)="629e98fdbe74f36f7bd2beb9e394b07b3971611889a9434aa3fe0df000ac59ae2abd473b9afa610b9d5cd6f4e0c6b69f018f07c1cc973e70ebf235d31800fadde78cdcc3d4c15215a3c9bc38c8c23e2334866955440cdb9bc84321e43eaad5b8310cdf5d457feedfece72493d1b558feed095baf70e2c8de643c332b0b26ec8452b1e7a271c1e75436968eec27e33d3c2c2af6ff7c72f5bcdc8e30edde752468c161f000a1b34e94b3d96d11b798238284dd164007177942e93284c12ee03f43550f7da36cd2061e908ce518d2f9a0c19a21490e2a0e44573ef7ede2", 0xdc, 0x3, 0x0, 0x2, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x12, r0, &(0x7f0000000400)="eb529397d199cce9df9362b9db6853b3318307d403caa96919959f143413af119089d4309b1c71fd346fa81b64e26dac2204de59f10743e19da04d29da6a57c0877037c912135dc663d5a3d0d8c6ffd5128f76870a8ed92539a75e16f5ddd02f4a31872504630faf5b9861fea9084328eb63578016fd10a7bc9afe4f4fd970d40fe287c3368338e39cf54099a03f6d06bc0a", 0x92, 0x80000001, 0x0, 0x3, r2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x899, r3, &(0x7f0000001700)="f7856097de1c3c0f922f4f3147d3dacb70a7611d9f5b44bbadd3c68b64865db98bb45ae79c9d61b4ef51697796db7ac53422756db7b4f53a7787cc49c990cc5b5bf460460f74efabb1b0bdd690c3081a52bf4583f1773568032b9394447cf0523f6f9cb2e32e3c0b1f0b", 0x6a, 0x81, 0x0, 0x3}]) 05:32:27 executing program 5: ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x10c, 0x3, 0x6, 0x2, "25b25fc26200fc31e381c44cad5fb3a3f98e6af28a978d45a044dfc389dfce20cd6f6420fb9e15ae964a7bc57259c573837af01fe494e2f7100fdd73067b315f3268e23a6d63bc686ad9cec8acbf414de3b58e827742c4110d31d1e311ae74e4d5aac00feba20dda999d21aede66805795da22a826e369e728b941284ba7d4cb2e010b1b3a252709aeddc52f38d8d515af045f8403047a92f80be8b0bc36fd3d1cf69e33f86f6c97ff745e3a0f0ec4bd118c99a96cda5e9a4a43d3687643a6885d731265307e8071dd1b4a8c7815f109a4a25899a34388c5f9ab3c767f871fbf7798c36071aa9d19c85d740f02ac2cb4a3771a50"}) r0 = eventfd2(0x7fe000, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000000)={0x1, 0xcbd4}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x2, 0x7}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x10c, 0x3, 0x6, 0x2, "25b25fc26200fc31e381c44cad5fb3a3f98e6af28a978d45a044dfc389dfce20cd6f6420fb9e15ae964a7bc57259c573837af01fe494e2f7100fdd73067b315f3268e23a6d63bc686ad9cec8acbf414de3b58e827742c4110d31d1e311ae74e4d5aac00feba20dda999d21aede66805795da22a826e369e728b941284ba7d4cb2e010b1b3a252709aeddc52f38d8d515af045f8403047a92f80be8b0bc36fd3d1cf69e33f86f6c97ff745e3a0f0ec4bd118c99a96cda5e9a4a43d3687643a6885d731265307e8071dd1b4a8c7815f109a4a25899a34388c5f9ab3c767f871fbf7798c36071aa9d19c85d740f02ac2cb4a3771a50"}) (async) eventfd2(0x7fe000, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000000)={0x1, 0xcbd4}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, 0x0) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x2, 0x7}) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) 05:32:27 executing program 1: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) eventfd2(0x7, 0x80001) socketpair(0xa, 0x5, 0x0, &(0x7f0000000280)) io_setup(0x8, &(0x7f00000017c0)) 05:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x26d41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, r3) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x0, 0x70bd2b}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4008880) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$FOU_CMD_DEL(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x7}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r9, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:27 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:27 executing program 1: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) eventfd2(0x7, 0x80001) io_setup(0x8, &(0x7f00000017c0)) 05:32:27 executing program 2: eventfd2(0x7fe000, 0x0) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x12800) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0x9, @output={0x0, 0x1, {0x5, 0x6}, 0x27, 0x5a21}}) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) 05:32:27 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0x400, 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r0, 0x1, 0x20, r1}) 05:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x26d41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, r3) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x0, 0x70bd2b}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4008880) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$FOU_CMD_DEL(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x7}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r9, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x26d41, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r3) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4008880) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$FOU_CMD_DEL(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x7}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r9, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) 05:32:27 executing program 2: eventfd2(0x7fe000, 0x0) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x12800) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0x9, @output={0x0, 0x1, {0x5, 0x6}, 0x27, 0x5a21}}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) 05:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x26d41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, r3) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x0, 0x70bd2b}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4008880) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$FOU_CMD_DEL(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x7}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r9, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x26d41, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r3) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4008880) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$FOU_CMD_DEL(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x7}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r9, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) 05:32:27 executing program 0: r0 = eventfd2(0xffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)=0x0) (async) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x43, 0x20100) io_submit(r3, 0x3, &(0x7f0000000080)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f00000001c0)="f56f77e233798a0275000000000013004ee73aab576e77a86c9a7759ea4ec3a24b04b0e99f74ab9c4d612facfef4af6dfc255b263aca8de5f6eb631a0c5a20f756ce8ab1ca8def33a37ad6b10189df12bb0e06bc5ff2aceb9c9833f6b7e4163ad8eacf5270c1f8ae6bcc7d3a3e99dae2980314316b7fe49b6e1de99519b92328e20f27dc0d4b98ed1db5ec0796", 0xffffff0c, 0x200000003}, 0x0, 0x0]) (async) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) (async) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r6, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) (async) io_destroy(r6) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2, &(0x7f0000000000), 0x4, r5, 0x6}) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4008af14, &(0x7f0000000280)={0x2, 0xffff}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:27 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0x400, 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r0, 0x1, 0x20, r1}) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0x400, 0x8) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r0, 0x1, 0x20, r1}) (async) 05:32:27 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0xf000, &(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x1}) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000000)={0x10, 0x5}) 05:32:27 executing program 1: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) io_setup(0x8, &(0x7f00000017c0)) 05:32:27 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0x400, 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r0, 0x1, 0x20, r1}) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0x400, 0x8) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r0, 0x1, 0x20, r1}) (async) 05:32:28 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:28 executing program 5: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x5, 'syz1\x00'}) r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x0, 0x70bd2b}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x7, 0x6, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x7, 0x20, 0xfff, 0xd7}}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x28, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6c}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0xffffffffffffffb8, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x300, 0x0, 0x0, {}, [@BATADV_ATTR_BONDING_ENABLED]}, 0x1c}}, 0x4004002) 05:32:28 executing program 1: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_setup(0x8, &(0x7f00000017c0)) 05:32:28 executing program 0: r0 = eventfd2(0xffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) (async, rerun: 32) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x43, 0x20100) (rerun: 32) io_submit(r3, 0x3, &(0x7f0000000080)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f00000001c0)="f56f77e233798a0275000000000013004ee73aab576e77a86c9a7759ea4ec3a24b04b0e99f74ab9c4d612facfef4af6dfc255b263aca8de5f6eb631a0c5a20f756ce8ab1ca8def33a37ad6b10189df12bb0e06bc5ff2aceb9c9833f6b7e4163ad8eacf5270c1f8ae6bcc7d3a3e99dae2980314316b7fe49b6e1de99519b92328e20f27dc0d4b98ed1db5ec0796", 0xffffff0c, 0x200000003}, 0x0, 0x0]) (async) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) (async) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r6, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) (async) io_destroy(r6) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2, &(0x7f0000000000), 0x4, r5, 0x6}) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4008af14, &(0x7f0000000280)={0x2, 0xffff}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x0, 0x70bd2b}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x7, 0x6, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x7, 0x20, 0xfff, 0xd7}}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x28, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6c}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0xffffffffffffffb8, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x300, 0x0, 0x0, {}, [@BATADV_ATTR_BONDING_ENABLED]}, 0x1c}}, 0x4004002) 05:32:28 executing program 5: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x5, 'syz1\x00'}) r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:28 executing program 5: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x5, 'syz1\x00'}) (async) r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:28 executing program 1: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) io_setup(0x8, &(0x7f00000017c0)) 05:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x7, 0x6, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x7, 0x20, 0xfff, 0xd7}}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x28, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6c}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0xffffffffffffffb8, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x300, 0x0, 0x0, {}, [@BATADV_ATTR_BONDING_ENABLED]}, 0x1c}}, 0x4004002) 05:32:28 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0xf000, &(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x1}) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000000)={0x10, 0x5}) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)) (async) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0xf000, &(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x1}) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r4, 0x0, 0x0) (async) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000000)={0x10, 0x5}) (async) 05:32:28 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) r1 = eventfd2(0x7fe000, 0x0) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa084, 0x8) read$eventfd(r1, &(0x7f0000000100), 0x8) 05:32:29 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:29 executing program 1: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_setup(0x8, &(0x7f00000017c0)) 05:32:29 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r1 = io_uring_setup(0x5d44, &(0x7f0000000040)={0x0, 0xdef, 0x2, 0x0, 0x214}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffc}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000000c0), 0x1) 05:32:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0xa080, 0x0) eventfd2(0x4, 0x800) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\b\x00', @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) (async) r1 = eventfd2(0x7fe000, 0x0) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa084, 0x8) (async) read$eventfd(r1, &(0x7f0000000100), 0x8) 05:32:29 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0xf000, &(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x1}) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000000)={0x10, 0x5}) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)) (async) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0xf000, &(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x1}) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r4, 0x0, 0x0) (async) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000000)={0x10, 0x5}) (async) 05:32:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0xa080, 0x0) eventfd2(0x4, 0x800) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\b\x00', @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0xa080, 0x0) (async) eventfd2(0x4, 0x800) (async) syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\b\x00', @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) (async) 05:32:29 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) r1 = io_uring_setup(0x5d44, &(0x7f0000000040)={0x0, 0xdef, 0x2, 0x0, 0x214}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffc}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000000c0), 0x1) 05:32:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) r1 = eventfd2(0x7fe000, 0x0) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa084, 0x8) read$eventfd(r1, &(0x7f0000000100), 0x8) syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) (async) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa084, 0x8) (async) read$eventfd(r1, &(0x7f0000000100), 0x8) (async) 05:32:29 executing program 1: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) io_setup(0x8, &(0x7f00000017c0)) 05:32:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0xa080, 0x0) (async) eventfd2(0x4, 0x800) (async) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\b\x00', @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:29 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r1 = io_uring_setup(0x5d44, &(0x7f0000000040)={0x0, 0xdef, 0x2, 0x0, 0x214}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffc}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000000c0), 0x1) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) io_uring_setup(0x5d44, &(0x7f0000000040)={0x0, 0xdef, 0x2, 0x0, 0x214}) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffc}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000000c0), 0x1) (async) 05:32:30 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3, r1}) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r2, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r6 = eventfd2(0x7, 0x1) r7 = eventfd(0x3) io_submit(r2, 0x7, &(0x7f0000001600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f0000000040)="5ab97cfa1c15ff63e912f610d1331618b067cc82db8239dfe48f4980466d509ae54ceb28f7c10472ff97c80a5e866fb9ffc148b186f02ef76bd6d03ecd5829da7c532ad6a3a57fd704224712c8e53af3fc74da1762583ab6dedcdfbe0ebb600d357070fc7014b3036fabcfae41543c98b5123f94787e2cc7f20b65876bde8e5b7d524b1e1298d8714f4f6fc49a9959f0486edbafe3d22a37cacbc20e11", 0x9d, 0x5, 0x0, 0x1, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0xf3, r1, &(0x7f0000000180)="5ab4a54101a241ea83eec23b772d1381c336a31bed4b90dd9a001b6f9e3708f53eb275c9617ddc4a", 0x28, 0x1, 0x0, 0x0, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x1000, r5, &(0x7f0000000200)="f246c6a42010d3942971afc1b58505dc68832d1d835804973bc0a2e63d44df6db1d6a46713119ea65c929a406369b42ccafb9b66c3ed8ea988e6f22a0487578572227908d02c804a070f49dcfa2bd2b5be194934cbc80d8bf2e46ba4a1cf9958c6b0e10793692cba88d4c627c7c7859d65369d2ea54a6fe287c5d198bd09369723220ec57a15ac12af5a5483154bc4a68bcf8a5f715909116510a387be3607b2245e75e32382d4a082b7b94a1ae5aa1970", 0xb1, 0x8, 0x0, 0x2, r6}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000300)="747435826d98dd9014073c692f5addf11ce1e64fe136c132c65e169a08fa716de226", 0x22, 0x7, 0x0, 0x3, r0}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f00000003c0)="109a1ad976e5ab0fd574e3cd520f270e1f3b61698b0b4c8f052a96aff5aee01c029ad419a318f36d5eb2ecf9f28b245eb538c3dacd48f605135c75ba0e106795f622c95cd1b71b54723a849a55745c019207d14c3ccb4e7d74bb3b080fcf64c2248c7d604fff3a037446bc500ae90bab9d60be06edc75f2ccc96824033f3cf7e98c2568e4aefe4040ea11288201f8a4e621ea0b1fe38f7426077e23c15efc0b332d39c2a45a35538f3a5b1c4eecac0a507f5ec51ebdd00d7ba6a8b6590379cfc947389a5da9ab46f5b204e721af2ae61705bb40f446eedb506a775cf13697c4466a9e24c33414ff54d2dd03cb3ad90f4868a6fa0a570d00b2600f0456f8d27962ad0a4ff372d39fbb187cbe41522903b64814adb8efcea887758a20150aa14be4adfde48a7d0eaba41dbcefdc3074d86799434147c0ccd1f38594e53bce01acee69c2beede549f7c7736d57d8b3b91b29c066ba557fd89d1128b83b9651d82e7f3777275ee0c65a743259d429b79fc1f4af852a4281785d868aae3ebf65459ee32623157c3f7fef64feea447bb489fe12ef217daa396b48a90de2c72f979289cb373c22870353faa66bfecc66097c46136e98de7442b4e6fa8510e9f8a0a63004f084864aadc944e0b7628877e4de1da3c4ee27106b6a6dfb6ccba093dc459d231ca062b76e9673b90269e69591c0e8c62d4aed1de263b9eefa9235e0b4b02fb673e2d7e1ebf6df2809a3672b2076bb7ab320c0e2f910a2b18926d1bc54ce4c202c398e4e3896d586a9e0f563c7213909bb128ee53e70f255962f605add17a0f58a8e63bef1812500ab67095cf9529ce75e532f1762913e082b72be73b3275a14cb7dfe28b030c5e46f659d6c88c2ca12355e0fe813a9c6ad2d9d593f17c95ffb91e12f6bd1b85e38a55a3d6761ab30e26f63dfe9fbafc1252c4a9b35822de9604f74fe891bfeb26c4157881e7567abba385c0fff4bfb2b466a2c7fc96c55ae8edb34adce77e2ec2b565a1198896b601600d0f352b090860e48eb75b7a4ecc799d93dd2d60eabbb480c955db28c812bcf1d17c05646e2cc7b27363b4591ad04060fffef474335f2f44a16e1129ccf10af0548f195b1e96275d0c00c7aa4f04ff2a34d7e7a9e400654c6705870e73ad541eb7d2dd52d03e74ffe06e23bfb9b77a397efd5c2fa2dc5d52299faab23ec5019ac8488cacc0243851fafbdf23f72c549e1ae56a1eb024c4674e9c4009cc6eda2296926ede768b84b7e8f7a981dd4b7780019d88ce6cf4de46a1d7989b3e030e93ee338f038a3bbd3cd9a85fb691e999ab51e41b533f377348284234eee9d57a9c6f9da7e51b90fdb248cedd9f693e6e3215faae0c5966f5d903e4637593e4a4e1405872f36c56976d9950976ee284e9649265d32c2aff574f89d572a31a30fa6cb46e80c315744b92ac3b4f545165c62fb3faec3aa41892869f3ac34b1d7b072aede74220c3a207805340f81c8dcc401238b839f5ef6ca29e85937e158c29414e0da5dd9d4fc3b7320670434c6746df1f24e248c6b90bcf9a9e4ac740ce45194ee84fdc826b41cc067688aaf6b5392d3fc846664b19b3a5d3876daee78eaed786ab2814fc29db3d57d469628ded8f709dba7b76f74ccef623c73e331c946de629a9f0f16fde914d403ca6846a154e5bb67a2923a715db4573ad6e78f5e0605f7fde435b45671fb92b740f7e66638a22317b5228aaf279d6f40c1e976acc0b62c313147be9a8c338cfaf96d6e00b929dc3f337158e784fe1ed106fc7b221f1abdfa191048d283c521cf93c2e9582b034f1bc9cff40ae3c39600b2e22a6cf0d084befb3eeabec587e354e9cd189a60668ba75cacec14f86586d226cc98fd28e2d4e216ee442fe50513055e10ecce105c7d42b3a06c75804438087e1980c5f2337b19b2947b6f281be43fd52a3e1110fa5194cddc40fe19a856d7488b176e7bf2981cee1a285e24110b1d34f18fdeb8ed90b5e92d2f8fd8f28a45c5c77d63a42ad276f97cd4736c0ced691eafeedd30ea764260520934c3be477dfe758c23016e824fe06d5e3cc4e2c406f8d926f2135ff7a6548610b6a2b8607c7b5194ad43eacb9c4ea319f357731bfebb69f74b6448c64619be2e8de8609d9a6483214e319268cf7823aa0c9368cba956f26589cbb9cfcc4bde443c49b847b5f2d2a176afd4ca48f63821ad1acef822fe8cd8ce43d401e469ebf4712e232811ab211646d4ae8a912e7be3b18e6f3f1bdb9daab13bbf2c0b3f49a0e4255a0da06c78528fcdb727b43acfe1b3ca496f0bcd636ea712652eaab8863ebcf85085e7ec19ec15d183993008ffd87b2e91ad8ad6da43f4328d2623a08d692f284df96455264a4272ddce6b13c3021bcb4c12e149fa8de1c1962d10ab85e8753055b6c21592bcc32ec5c90b303878bd419415aff8add0efb5d56b06a6552ef967121b4ad1e74201ef8bbaaa37a448be7a7825b70294207d944db67343be27d6d2b9af8fd1fd234e29d6d3554520bc1792cc7467f2bb247623fd0a0b51a2a507b0fa93a290d6506b8fc3a7a3f20024b627ec7f98add948ea18d2fc8f6b80e7594a8a1fba0c6539a9747015332c288670b4ab2e118f0921cf70b0edbe02876368bfad40361846cfc9cbf9b9451b882c24a95729916345d07d831cd2f1842edad587605a11ede7c05f77972429d993350444dbb57fa4f4a44c8c6d3ae5dcf504c0d0b563c4476fc77ce7177f4d11e4bd4e243b53577531e45aaee020821b7048926ff354810adab070253cafdfb516f5108124959bfc43b3cdbd806a86d771269255a86b6e3b100c4cd25de25920ceb3430a722f503c61c60aef7041a3d7572421a0f4bdfb7e8ff7c49866c4bff0182183e3b022ce3fc0ca5428901943a75e658fc5da3a72dd8eee25e4a63cfa78bfdf69ea84f19c7bb7d863cb776a0c3a12b6c77e8858eaea32768cc4e46f3b3275744ecc6678cb1403b0ade23ac62ef15aa67ee152459294a0476361d97055e1bc83f6c17b4697388dd08b739bb605136fb475ecf10d1c7414bc80425d55c939b5dbe5a47f8348aec6a61433798b8e15de1453276cfd5090cb4b88fb06fe6961b0a683300fd14f61f221033c1312be96b2d8e2a831dbbfdfd7b1b211c6a45b51fd3412dbdf0f11f47981c2e543e76865f3d3ed71170c71a5e869854156c06376bffc5534032342487f044ed9f88182d689eddb9103d6747686a438d8bdeb5566e972ff6db3e607e60c61b96ac5876035e89d61e99a824860ec93f929e1ab597c200ba713eb8a3310ae6e940b4fbce34f97b9467c05dfd373bdc9b7ff762191a082c1314fa43f6b7f0aa00ada8b67b2f95a5c46f87bf64ab84751da74b5900b4fbd62393b65ba484dc9266b506bd4d1f896b444f1652de77d88f9604f1b4fb8054815ec525c89aae5bcfed5533eecb14a110f266fb4299fbde8602a9458bcb7a69c4ed90e458e8c59c28abc39d8c500e0c52956207045f98621bbecfcf5582e36b2e77239c1d34f05a04544cee4c8287a2cd2bb7325f0fcf9c4c8f96a097dc10b9af818c92686a1665a34e5e28c4cad588b70cd1aa7d77ab20ffbfb564945937783d81216e45b5bb66ad14328f93ff6c5af7bd2f2b244e0e2a68c86f61aa54c872b091e867f268e8c14ba5179847872daa2c2515f8f49b5432cfb40f1ed98dda1f2dab3b8ab560c3539b8a928312a08e8d4a462260d9fbdeb76df4871af3b57db2ade40072b3a361b729b7a7a8e094769b53d381375e897d72bef1b119d664d91d800aec9f30199af45fcb4e7a92779dacc1f9474bb4763ed5c49c3b9c27a1f36ce5fdb8cd87f4da36e8652655a77ae125d0b302b43d8233c9135fc85ba3eb6bd74cbfad177177e7766bd2f78b2fa7b8dfb38d47346de4753c22087a214adf1ee5602773b067eafb3afd90c72f587839f1ffe2f85c687276ca1d33ffce0e5ae6dff1eb0dcebe7396cd313280e78f7dc5640668053f2a42b23681cf319cd4481f409b257a1f1d4395a647961dadd730b305b187a3582f0dc76f5aa0bb849f7ff22d708066472d18234477bc54983707f679fde7bb78f2fdc92e9728157139680e26bc412260c1585ba5d303a0e091f6140688cb7ea9963ab12af6bc56c25e77567656c5113ada8f93645cffa6ace70a5e54b1e8ca499d6854778fdfc3b094ac7fc9bfd5f48b416c67e9d67244f217563699305584773233784f548fb17f565c75b748646a5d58c25ec530c86685a8c374d61b9bd6fff6e850760c6fc4ab87b0fb3a3d78b30fcf1c404529783c68ed5f812ed7c622b54962c8823da6d553fad3e2fede8fc750442d0e9f75e1d18b1e1c67387554f2122d57d6b28c0102d56a73e9f3dc2a0522731a9cb78bcebd7d1f5cebec6b5357da2eecdfe236de36b589e7e962873e1a0bc345726abdb9c87f4e7408aa3a412ae3bed83923032c20e8f16f8034fb1e55002ead637642c9b8a971a6c305e4eb6c46afcf83c36d42644b345969c498703370127ffbfdcf0e549e498c22839c6bbd06d52ec262186c1e7f3ac22a8cffec7280aa61bcf0012263d5502339ca10e235cd861f23d4de5d8c38a79508e47d31c8381a93eaa207fc389113ccf7c98bca9bc8e6d6351db7e1e23cea81e0f4e0083b071891dcb0425aea5623245cbc3484c367860df104e26514630ae1cb662b8f94aaaa2499b1e863fb7dcddbf8b2b1e04305d377f721ff3e3c74768af3b3f8226b638a15ce4185838d317c22529c81235e7307e957bec005f0085c3e414b14de03bfc42a27dd73fd0d8e2dc2d9e8457f9a827e3910909dbc88d6da3454f995470fe95755a66b568414b066b7d3879c005d7f42e0e4e54673668cf291e65f2a5f0a898a4575ca598bef3c7be75f1b4c3bc9627ed9ee569d8a92f31e3cb9920302b2eb1ff973391f6d045587303b2873bb65657d738f531917949c3e5f49f50b3242f726e2c4f7d77e3d1d2ebb9b91b0fbdb5f72ccbee15f5dbe97096a424d8e9c0476587a3a911c5d8eca4748d592dcab51d86f6d086c90050b7e02a3ed1c91281005d3eef6c87627572cba417afcbcb007c6dd2374ee419ae352da439341171c3e9cc7313d27ea65c3e537eb600f4fcf21624cdb8bdab1492f14e2775d901534332d8f472f8137fc6edd67dd6c191236944d218cad64844850086210c0b7770cd0deb08cd986716e48a6f3416dc94d885a3d412e08326d58597e234fabafb1a123d19adf986fb303f086e9dd7d52b2823939766a27aba98f407823654ae65966478ca8f144ac10660ae06826e7f3d32ee671c3591c77664055f6c507643647c8bb9312e1ead11dd1c1054202642ee07879f2c6aaa532393cca717698803402e36ceedf6ec98ef0b3fb08232beedeb84ca3daa51add52fd3addc88c72d4d57e4f2bfc392b5d0a8ff3db5ba23c6dfefec7f69624f7c2d425025fffc1c226f82e84e8225ac8c67beb792bf71ed20d1e0bb3e42472fc4ff408cda2ae6718df41178bd639f4288bce349ba053383e349115d99cba3b814b11e74b6078be334498a9a6e13f71bb3e96c780c61ee45ac27298bb11a356a7aed8c4aee3be31e7f566ebb9ece4520f708db6fa89d6a076ec2cd310142abbf29e5875a30c4dc42b299230b541fd649e489aa9b71e6e3afc4d8f65f3e9c5c6b981e169983ce415bc207d3be3173dc66ac472fc7af0bbad988f0037a548fe74f6c63045845db49628618f8deb0204373b74ffbe29784559d6b3cc70cb45ebc7cec4671982a71a45dcbdf2e16b38c2d41954fcbf019064f8", 0x1000, 0x11, 0x0, 0x2, r7}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x5, 0x7f, r0, &(0x7f0000001400)="bb0f293c9fac8e6b519797eaf63daabced696346a7fc951bd43f1aa3f6265bc6b925de70a83249c2383f781aba39300048b06dbf63e6a97f30aad2a062789cda8ed658d9d494ce993e88941ba992f645350d1c38bfdde921d7e60e6b4efe070260063da372ea73d554e381742a31443bc9c503638a1202cce3f9c0807efbb4c59b36d299529f3ff350b13f302682866d069520586cce9c32ca55f814", 0x9c, 0x9, 0x0, 0x2, r1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x3, 0xe66, r0, &(0x7f0000001500)="bc0d32b758eddc0b7ad4cd236310402cd09120c7dcfb1bf090bb3c15f7556c5dfee2104c77c78a5a9a9d47e329d21c1f1912f1aa3385c61e1b28d61ed597263b9155b961f7c3c8b8a69ad9d4b23460503fd8e95eeace577cff8ba62e5f235ccb12280c18659c720407250faf9bbcdf6424598eb0bb03686a066fc5973e39dde0325e8531d2c787296194f95ca1f0726f97a78d72fbcad62389d766e037fb3389d30ed0", 0xa3, 0x2, 0x0, 0x2, r1}]) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000001680)={0x0, 0x7ff, 0x424, '\x00', &(0x7f0000001640)=0xf4}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000016c0), 0x200580, 0x0) 05:32:30 executing program 5: r0 = eventfd2(0xfffff800, 0x180001) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:30 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x7ff, 0x1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) r4 = eventfd2(0xa68b, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r8, 0x0, 0x0) io_submit(0x0, 0x7, &(0x7f0000001640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, &(0x7f0000000000)="b84ff6a421955c1d7fdd0cc87bc048ca97c1e0dc56ceab1399d2609c8fdeed6f2cf90858e2c53b6c150595fc60bd5f11ea1e52b5d90b5abd84a13417f2527c438cc3c70a363756e64141d04ea0917c56cf3c61a4c79c6952d51e062a063168418a117291003142d7fb6db5684048496f37165a3b22dc7339e2e0916d3ec6cf42116d2d91d4f8df445d4a831d4d68825c5cc897ce8459e653ac065e6161f5d8cbd8a22af3dcf874504c7c4afe3c3ddf49fb686c5fa73d82c8bbb70ab85a791be2b96bc65389ca2b6259fdb45436fede2dd3ee8596e7", 0xd5, 0x8, 0x0, 0x2, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f00000001c0)="b46aa35027cad384f7f781d0f4acf83c48be8eb672cffa017379563f4bd7899b8aab41ee0cda6a6298c258804289836236358933228912357186", 0x3a, 0x6, 0x0, 0x3, r3}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000240)="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", 0x1000, 0xff, 0x0, 0x2, r4}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x2, 0xe4c1, r5, &(0x7f0000001280)="3fdb772db5944949b9762d24398d2da611717cba4e3912ea5dd670829bc7c706111643f5a77c6815cfc4d834792ae2d326bc34e023bd81f0eaf17ba44d4750d6a7bb94ba1055ffdbf4a92f3a8c6a7318932625b4c24cef7ab6a3cd123456c8c311911cfd49dc1d0e385173751b0ec94f307c3d4cee59f1f4d6446e518f4a8f320499a52db58554ec1e7050b5287a0bda16f32602cd509be760e1d56511cbce1dcfd02f61", 0xa4, 0x73, 0x0, 0x3, r6}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x20, r0, &(0x7f0000001380)="8f50481f6955e00abe3b6008657cf30e41296b9d8c86ef925deead1b52abe9abb06abc972b4b123b469a9175939c992b5090d0a46741691ec390cf801829184a1e9e274b12215a629190ccedc58ef1bcace1361e1aa31c407b63f5a8f67dce5de537a62588e3c5104b4fc9712ad3ba947587b84930971bb2a42d380bc93e3178c71769d53f130d3103b8e8d524d845aab36d1a7d393928b8e981420db44ce6a752401da2de4947163f6d36448da571bbae93443f35", 0xb5, 0x1, 0x0, 0x3, r0}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x2, 0xe146, r7, &(0x7f00000014c0)="9896ca9233135d1f8ee22d5e3711e94db0e7c1bc1d78315c273342fe5ba6a3ddf32bd28171", 0x25, 0x20, 0x0, 0x1, r8}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000001540)="970ddf5abdab11f9832887cb81d846088eec9f7ca9ba0ea7bd8b431b3b4a7c88e6dda82fa525faa06aecbd94bc2266007f949701b26d850e685d4eb2a6e199fe2439a968ee69419aeb0823b664e5f380487abb76aab024a615d4db97c6719d36140726dca61e424220737694da1115859ead324d2f06f34dd8b7061570d354440b8ad0843ebfd87a3ecafa6f184b8c5bd56801d95b6914dd7afd1f5840c6f3b76a8e232e4f", 0xa5, 0x6, 0x0, 0x0, r0}]) 05:32:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x7, 0x8, 0x5}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000e2c2e648236ae79f9328c2fe0000"], 0x1c}}, 0x0) 05:32:30 executing program 1: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x8, &(0x7f00000017c0)) 05:32:30 executing program 2: r0 = eventfd2(0x7fe000, 0x800) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) 05:32:30 executing program 5: r0 = eventfd2(0xfffff800, 0x180001) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0xfffff800, 0x180001) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) 05:32:30 executing program 2: r0 = eventfd2(0x7fe000, 0x800) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) 05:32:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x7, 0x8, 0x5}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000e2c2e648236ae79f9328c2fe0000"], 0x1c}}, 0x0) 05:32:30 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) (async) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x7ff, 0x1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) r4 = eventfd2(0xa68b, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) (async, rerun: 64) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 64) write$vga_arbiter(r8, 0x0, 0x0) (async) io_submit(0x0, 0x7, &(0x7f0000001640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, &(0x7f0000000000)="b84ff6a421955c1d7fdd0cc87bc048ca97c1e0dc56ceab1399d2609c8fdeed6f2cf90858e2c53b6c150595fc60bd5f11ea1e52b5d90b5abd84a13417f2527c438cc3c70a363756e64141d04ea0917c56cf3c61a4c79c6952d51e062a063168418a117291003142d7fb6db5684048496f37165a3b22dc7339e2e0916d3ec6cf42116d2d91d4f8df445d4a831d4d68825c5cc897ce8459e653ac065e6161f5d8cbd8a22af3dcf874504c7c4afe3c3ddf49fb686c5fa73d82c8bbb70ab85a791be2b96bc65389ca2b6259fdb45436fede2dd3ee8596e7", 0xd5, 0x8, 0x0, 0x2, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f00000001c0)="b46aa35027cad384f7f781d0f4acf83c48be8eb672cffa017379563f4bd7899b8aab41ee0cda6a6298c258804289836236358933228912357186", 0x3a, 0x6, 0x0, 0x3, r3}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000240)="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", 0x1000, 0xff, 0x0, 0x2, r4}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x2, 0xe4c1, r5, &(0x7f0000001280)="3fdb772db5944949b9762d24398d2da611717cba4e3912ea5dd670829bc7c706111643f5a77c6815cfc4d834792ae2d326bc34e023bd81f0eaf17ba44d4750d6a7bb94ba1055ffdbf4a92f3a8c6a7318932625b4c24cef7ab6a3cd123456c8c311911cfd49dc1d0e385173751b0ec94f307c3d4cee59f1f4d6446e518f4a8f320499a52db58554ec1e7050b5287a0bda16f32602cd509be760e1d56511cbce1dcfd02f61", 0xa4, 0x73, 0x0, 0x3, r6}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x20, r0, &(0x7f0000001380)="8f50481f6955e00abe3b6008657cf30e41296b9d8c86ef925deead1b52abe9abb06abc972b4b123b469a9175939c992b5090d0a46741691ec390cf801829184a1e9e274b12215a629190ccedc58ef1bcace1361e1aa31c407b63f5a8f67dce5de537a62588e3c5104b4fc9712ad3ba947587b84930971bb2a42d380bc93e3178c71769d53f130d3103b8e8d524d845aab36d1a7d393928b8e981420db44ce6a752401da2de4947163f6d36448da571bbae93443f35", 0xb5, 0x1, 0x0, 0x3, r0}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x2, 0xe146, r7, &(0x7f00000014c0)="9896ca9233135d1f8ee22d5e3711e94db0e7c1bc1d78315c273342fe5ba6a3ddf32bd28171", 0x25, 0x20, 0x0, 0x1, r8}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000001540)="970ddf5abdab11f9832887cb81d846088eec9f7ca9ba0ea7bd8b431b3b4a7c88e6dda82fa525faa06aecbd94bc2266007f949701b26d850e685d4eb2a6e199fe2439a968ee69419aeb0823b664e5f380487abb76aab024a615d4db97c6719d36140726dca61e424220737694da1115859ead324d2f06f34dd8b7061570d354440b8ad0843ebfd87a3ecafa6f184b8c5bd56801d95b6914dd7afd1f5840c6f3b76a8e232e4f", 0xa5, 0x6, 0x0, 0x0, r0}]) 05:32:30 executing program 2: r0 = eventfd2(0x7fe000, 0x800) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) 05:32:30 executing program 1: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) io_setup(0x8, &(0x7f00000017c0)) 05:32:30 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3, r1}) (async) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r2, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) (async) r3 = socket$rds(0x15, 0x5, 0x0) (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r6 = eventfd2(0x7, 0x1) (async) r7 = eventfd(0x3) io_submit(r2, 0x7, &(0x7f0000001600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f0000000040)="5ab97cfa1c15ff63e912f610d1331618b067cc82db8239dfe48f4980466d509ae54ceb28f7c10472ff97c80a5e866fb9ffc148b186f02ef76bd6d03ecd5829da7c532ad6a3a57fd704224712c8e53af3fc74da1762583ab6dedcdfbe0ebb600d357070fc7014b3036fabcfae41543c98b5123f94787e2cc7f20b65876bde8e5b7d524b1e1298d8714f4f6fc49a9959f0486edbafe3d22a37cacbc20e11", 0x9d, 0x5, 0x0, 0x1, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0xf3, r1, &(0x7f0000000180)="5ab4a54101a241ea83eec23b772d1381c336a31bed4b90dd9a001b6f9e3708f53eb275c9617ddc4a", 0x28, 0x1, 0x0, 0x0, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x1000, r5, &(0x7f0000000200)="f246c6a42010d3942971afc1b58505dc68832d1d835804973bc0a2e63d44df6db1d6a46713119ea65c929a406369b42ccafb9b66c3ed8ea988e6f22a0487578572227908d02c804a070f49dcfa2bd2b5be194934cbc80d8bf2e46ba4a1cf9958c6b0e10793692cba88d4c627c7c7859d65369d2ea54a6fe287c5d198bd09369723220ec57a15ac12af5a5483154bc4a68bcf8a5f715909116510a387be3607b2245e75e32382d4a082b7b94a1ae5aa1970", 0xb1, 0x8, 0x0, 0x2, r6}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000300)="747435826d98dd9014073c692f5addf11ce1e64fe136c132c65e169a08fa716de226", 0x22, 0x7, 0x0, 0x3, r0}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f00000003c0)="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", 0x1000, 0x11, 0x0, 0x2, r7}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x5, 0x7f, r0, &(0x7f0000001400)="bb0f293c9fac8e6b519797eaf63daabced696346a7fc951bd43f1aa3f6265bc6b925de70a83249c2383f781aba39300048b06dbf63e6a97f30aad2a062789cda8ed658d9d494ce993e88941ba992f645350d1c38bfdde921d7e60e6b4efe070260063da372ea73d554e381742a31443bc9c503638a1202cce3f9c0807efbb4c59b36d299529f3ff350b13f302682866d069520586cce9c32ca55f814", 0x9c, 0x9, 0x0, 0x2, r1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x3, 0xe66, r0, &(0x7f0000001500)="bc0d32b758eddc0b7ad4cd236310402cd09120c7dcfb1bf090bb3c15f7556c5dfee2104c77c78a5a9a9d47e329d21c1f1912f1aa3385c61e1b28d61ed597263b9155b961f7c3c8b8a69ad9d4b23460503fd8e95eeace577cff8ba62e5f235ccb12280c18659c720407250faf9bbcdf6424598eb0bb03686a066fc5973e39dde0325e8531d2c787296194f95ca1f0726f97a78d72fbcad62389d766e037fb3389d30ed0", 0xa3, 0x2, 0x0, 0x2, r1}]) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000001680)={0x0, 0x7ff, 0x424, '\x00', &(0x7f0000001640)=0xf4}) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000016c0), 0x200580, 0x0) 05:32:30 executing program 5: r0 = eventfd2(0xfffff800, 0x180001) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x7, 0x8, 0x5}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000e2c2e648236ae79f9328c2fe0000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x7, 0x8, 0x5}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000e2c2e648236ae79f9328c2fe0000"], 0x1c}}, 0x0) (async) 05:32:30 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x7ff, 0x1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) r4 = eventfd2(0xa68b, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r8, 0x0, 0x0) io_submit(0x0, 0x7, &(0x7f0000001640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, &(0x7f0000000000)="b84ff6a421955c1d7fdd0cc87bc048ca97c1e0dc56ceab1399d2609c8fdeed6f2cf90858e2c53b6c150595fc60bd5f11ea1e52b5d90b5abd84a13417f2527c438cc3c70a363756e64141d04ea0917c56cf3c61a4c79c6952d51e062a063168418a117291003142d7fb6db5684048496f37165a3b22dc7339e2e0916d3ec6cf42116d2d91d4f8df445d4a831d4d68825c5cc897ce8459e653ac065e6161f5d8cbd8a22af3dcf874504c7c4afe3c3ddf49fb686c5fa73d82c8bbb70ab85a791be2b96bc65389ca2b6259fdb45436fede2dd3ee8596e7", 0xd5, 0x8, 0x0, 0x2, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f00000001c0)="b46aa35027cad384f7f781d0f4acf83c48be8eb672cffa017379563f4bd7899b8aab41ee0cda6a6298c258804289836236358933228912357186", 0x3a, 0x6, 0x0, 0x3, r3}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000240)="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", 0x1000, 0xff, 0x0, 0x2, r4}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x2, 0xe4c1, r5, &(0x7f0000001280)="3fdb772db5944949b9762d24398d2da611717cba4e3912ea5dd670829bc7c706111643f5a77c6815cfc4d834792ae2d326bc34e023bd81f0eaf17ba44d4750d6a7bb94ba1055ffdbf4a92f3a8c6a7318932625b4c24cef7ab6a3cd123456c8c311911cfd49dc1d0e385173751b0ec94f307c3d4cee59f1f4d6446e518f4a8f320499a52db58554ec1e7050b5287a0bda16f32602cd509be760e1d56511cbce1dcfd02f61", 0xa4, 0x73, 0x0, 0x3, r6}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x20, r0, &(0x7f0000001380)="8f50481f6955e00abe3b6008657cf30e41296b9d8c86ef925deead1b52abe9abb06abc972b4b123b469a9175939c992b5090d0a46741691ec390cf801829184a1e9e274b12215a629190ccedc58ef1bcace1361e1aa31c407b63f5a8f67dce5de537a62588e3c5104b4fc9712ad3ba947587b84930971bb2a42d380bc93e3178c71769d53f130d3103b8e8d524d845aab36d1a7d393928b8e981420db44ce6a752401da2de4947163f6d36448da571bbae93443f35", 0xb5, 0x1, 0x0, 0x3, r0}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x2, 0xe146, r7, &(0x7f00000014c0)="9896ca9233135d1f8ee22d5e3711e94db0e7c1bc1d78315c273342fe5ba6a3ddf32bd28171", 0x25, 0x20, 0x0, 0x1, r8}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000001540)="970ddf5abdab11f9832887cb81d846088eec9f7ca9ba0ea7bd8b431b3b4a7c88e6dda82fa525faa06aecbd94bc2266007f949701b26d850e685d4eb2a6e199fe2439a968ee69419aeb0823b664e5f380487abb76aab024a615d4db97c6719d36140726dca61e424220737694da1115859ead324d2f06f34dd8b7061570d354440b8ad0843ebfd87a3ecafa6f184b8c5bd56801d95b6914dd7afd1f5840c6f3b76a8e232e4f", 0xa5, 0x6, 0x0, 0x0, r0}]) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) socket$l2tp(0x2, 0x2, 0x73) (async) syz_open_dev$sg(&(0x7f0000000180), 0x7ff, 0x1) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r3, 0x0, 0x0) (async) eventfd2(0xa68b, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r6, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r8, 0x0, 0x0) (async) io_submit(0x0, 0x7, &(0x7f0000001640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, &(0x7f0000000000)="b84ff6a421955c1d7fdd0cc87bc048ca97c1e0dc56ceab1399d2609c8fdeed6f2cf90858e2c53b6c150595fc60bd5f11ea1e52b5d90b5abd84a13417f2527c438cc3c70a363756e64141d04ea0917c56cf3c61a4c79c6952d51e062a063168418a117291003142d7fb6db5684048496f37165a3b22dc7339e2e0916d3ec6cf42116d2d91d4f8df445d4a831d4d68825c5cc897ce8459e653ac065e6161f5d8cbd8a22af3dcf874504c7c4afe3c3ddf49fb686c5fa73d82c8bbb70ab85a791be2b96bc65389ca2b6259fdb45436fede2dd3ee8596e7", 0xd5, 0x8, 0x0, 0x2, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f00000001c0)="b46aa35027cad384f7f781d0f4acf83c48be8eb672cffa017379563f4bd7899b8aab41ee0cda6a6298c258804289836236358933228912357186", 0x3a, 0x6, 0x0, 0x3, r3}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000240)="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", 0x1000, 0xff, 0x0, 0x2, r4}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x2, 0xe4c1, r5, &(0x7f0000001280)="3fdb772db5944949b9762d24398d2da611717cba4e3912ea5dd670829bc7c706111643f5a77c6815cfc4d834792ae2d326bc34e023bd81f0eaf17ba44d4750d6a7bb94ba1055ffdbf4a92f3a8c6a7318932625b4c24cef7ab6a3cd123456c8c311911cfd49dc1d0e385173751b0ec94f307c3d4cee59f1f4d6446e518f4a8f320499a52db58554ec1e7050b5287a0bda16f32602cd509be760e1d56511cbce1dcfd02f61", 0xa4, 0x73, 0x0, 0x3, r6}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x20, r0, &(0x7f0000001380)="8f50481f6955e00abe3b6008657cf30e41296b9d8c86ef925deead1b52abe9abb06abc972b4b123b469a9175939c992b5090d0a46741691ec390cf801829184a1e9e274b12215a629190ccedc58ef1bcace1361e1aa31c407b63f5a8f67dce5de537a62588e3c5104b4fc9712ad3ba947587b84930971bb2a42d380bc93e3178c71769d53f130d3103b8e8d524d845aab36d1a7d393928b8e981420db44ce6a752401da2de4947163f6d36448da571bbae93443f35", 0xb5, 0x1, 0x0, 0x3, r0}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x2, 0xe146, r7, &(0x7f00000014c0)="9896ca9233135d1f8ee22d5e3711e94db0e7c1bc1d78315c273342fe5ba6a3ddf32bd28171", 0x25, 0x20, 0x0, 0x1, r8}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000001540)="970ddf5abdab11f9832887cb81d846088eec9f7ca9ba0ea7bd8b431b3b4a7c88e6dda82fa525faa06aecbd94bc2266007f949701b26d850e685d4eb2a6e199fe2439a968ee69419aeb0823b664e5f380487abb76aab024a615d4db97c6719d36140726dca61e424220737694da1115859ead324d2f06f34dd8b7061570d354440b8ad0843ebfd87a3ecafa6f184b8c5bd56801d95b6914dd7afd1f5840c6f3b76a8e232e4f", 0xa5, 0x6, 0x0, 0x0, r0}]) (async) 05:32:30 executing program 2: ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000300)={0x690, 0xb09cd7b4492266c2, 0x300, 0x280, 0x400, 0x2, 0x2, 0x2, {0x3f, 0xb4, 0x1}, {0x1ff, 0x2, 0x1}, {0x1, 0x3ff, 0x1}, {0x7fffffff, 0xffffffff}, 0x0, 0x0, 0x5, 0xffffffff, 0x1, 0x9302, 0x9, 0x6, 0x2, 0x8001, 0x10001, 0x8, 0x10, 0x0, 0x2}) r0 = eventfd2(0x3, 0x1) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffa084, 0x3) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x668101, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xe71, 0xfffffffffffffffd, 0x7}) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x2) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r5) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000280)={0xd, 0xcc44, {0x56, 0x6, 0x2, {0xf8, 0xffff}, {0x6, 0x4}, @period={0x5d, 0xffff, 0x8000, 0x935e, 0xfff, {0x9, 0x0, 0x5, 0xfff}, 0x2, &(0x7f0000000240)=[0x9, 0x4]}}, {0x53, 0x9, 0x3, {0x1000}, {0x835, 0x5}, @cond=[{0x4, 0x4, 0x3f, 0xfff, 0x7fff}, {0x4000, 0x7, 0x3, 0x3, 0x7, 0x6}]}}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}}, 0x8000) r7 = eventfd(0x3) r8 = syz_open_dev$video(&(0x7f00000000c0), 0x93, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r8, 0x80845663, 0x0) read$eventfd(r7, &(0x7f00000001c0), 0x8) 05:32:30 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3ff, 0x5, 0x9, 0x100000000}) 05:32:30 executing program 1: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) 05:32:30 executing program 4: ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000340)={0x18, 0x0, 0x0, 0xff}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x18, 0x2, 0x20) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xbf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:30 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3, r1}) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r2, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r6 = eventfd2(0x7, 0x1) r7 = eventfd(0x3) io_submit(r2, 0x7, &(0x7f0000001600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f0000000040)="5ab97cfa1c15ff63e912f610d1331618b067cc82db8239dfe48f4980466d509ae54ceb28f7c10472ff97c80a5e866fb9ffc148b186f02ef76bd6d03ecd5829da7c532ad6a3a57fd704224712c8e53af3fc74da1762583ab6dedcdfbe0ebb600d357070fc7014b3036fabcfae41543c98b5123f94787e2cc7f20b65876bde8e5b7d524b1e1298d8714f4f6fc49a9959f0486edbafe3d22a37cacbc20e11", 0x9d, 0x5, 0x0, 0x1, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0xf3, r1, &(0x7f0000000180)="5ab4a54101a241ea83eec23b772d1381c336a31bed4b90dd9a001b6f9e3708f53eb275c9617ddc4a", 0x28, 0x1, 0x0, 0x0, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x1000, r5, &(0x7f0000000200)="f246c6a42010d3942971afc1b58505dc68832d1d835804973bc0a2e63d44df6db1d6a46713119ea65c929a406369b42ccafb9b66c3ed8ea988e6f22a0487578572227908d02c804a070f49dcfa2bd2b5be194934cbc80d8bf2e46ba4a1cf9958c6b0e10793692cba88d4c627c7c7859d65369d2ea54a6fe287c5d198bd09369723220ec57a15ac12af5a5483154bc4a68bcf8a5f715909116510a387be3607b2245e75e32382d4a082b7b94a1ae5aa1970", 0xb1, 0x8, 0x0, 0x2, r6}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000300)="747435826d98dd9014073c692f5addf11ce1e64fe136c132c65e169a08fa716de226", 0x22, 0x7, 0x0, 0x3, r0}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f00000003c0)="109a1ad976e5ab0fd574e3cd520f270e1f3b61698b0b4c8f052a96aff5aee01c029ad419a318f36d5eb2ecf9f28b245eb538c3dacd48f605135c75ba0e106795f622c95cd1b71b54723a849a55745c019207d14c3ccb4e7d74bb3b080fcf64c2248c7d604fff3a037446bc500ae90bab9d60be06edc75f2ccc96824033f3cf7e98c2568e4aefe4040ea11288201f8a4e621ea0b1fe38f7426077e23c15efc0b332d39c2a45a35538f3a5b1c4eecac0a507f5ec51ebdd00d7ba6a8b6590379cfc947389a5da9ab46f5b204e721af2ae61705bb40f446eedb506a775cf13697c4466a9e24c33414ff54d2dd03cb3ad90f4868a6fa0a570d00b2600f0456f8d27962ad0a4ff372d39fbb187cbe41522903b64814adb8efcea887758a20150aa14be4adfde48a7d0eaba41dbcefdc3074d86799434147c0ccd1f38594e53bce01acee69c2beede549f7c7736d57d8b3b91b29c066ba557fd89d1128b83b9651d82e7f3777275ee0c65a743259d429b79fc1f4af852a4281785d868aae3ebf65459ee32623157c3f7fef64feea447bb489fe12ef217daa396b48a90de2c72f979289cb373c22870353faa66bfecc66097c46136e98de7442b4e6fa8510e9f8a0a63004f084864aadc944e0b7628877e4de1da3c4ee27106b6a6dfb6ccba093dc459d231ca062b76e9673b90269e69591c0e8c62d4aed1de263b9eefa9235e0b4b02fb673e2d7e1ebf6df2809a3672b2076bb7ab320c0e2f910a2b18926d1bc54ce4c202c398e4e3896d586a9e0f563c7213909bb128ee53e70f255962f605add17a0f58a8e63bef1812500ab67095cf9529ce75e532f1762913e082b72be73b3275a14cb7dfe28b030c5e46f659d6c88c2ca12355e0fe813a9c6ad2d9d593f17c95ffb91e12f6bd1b85e38a55a3d6761ab30e26f63dfe9fbafc1252c4a9b35822de9604f74fe891bfeb26c4157881e7567abba385c0fff4bfb2b466a2c7fc96c55ae8edb34adce77e2ec2b565a1198896b601600d0f352b090860e48eb75b7a4ecc799d93dd2d60eabbb480c955db28c812bcf1d17c05646e2cc7b27363b4591ad04060fffef474335f2f44a16e1129ccf10af0548f195b1e96275d0c00c7aa4f04ff2a34d7e7a9e400654c6705870e73ad541eb7d2dd52d03e74ffe06e23bfb9b77a397efd5c2fa2dc5d52299faab23ec5019ac8488cacc0243851fafbdf23f72c549e1ae56a1eb024c4674e9c4009cc6eda2296926ede768b84b7e8f7a981dd4b7780019d88ce6cf4de46a1d7989b3e030e93ee338f038a3bbd3cd9a85fb691e999ab51e41b533f377348284234eee9d57a9c6f9da7e51b90fdb248cedd9f693e6e3215faae0c5966f5d903e4637593e4a4e1405872f36c56976d9950976ee284e9649265d32c2aff574f89d572a31a30fa6cb46e80c315744b92ac3b4f545165c62fb3faec3aa41892869f3ac34b1d7b072aede74220c3a207805340f81c8dcc401238b839f5ef6ca29e85937e158c29414e0da5dd9d4fc3b7320670434c6746df1f24e248c6b90bcf9a9e4ac740ce45194ee84fdc826b41cc067688aaf6b5392d3fc846664b19b3a5d3876daee78eaed786ab2814fc29db3d57d469628ded8f709dba7b76f74ccef623c73e331c946de629a9f0f16fde914d403ca6846a154e5bb67a2923a715db4573ad6e78f5e0605f7fde435b45671fb92b740f7e66638a22317b5228aaf279d6f40c1e976acc0b62c313147be9a8c338cfaf96d6e00b929dc3f337158e784fe1ed106fc7b221f1abdfa191048d283c521cf93c2e9582b034f1bc9cff40ae3c39600b2e22a6cf0d084befb3eeabec587e354e9cd189a60668ba75cacec14f86586d226cc98fd28e2d4e216ee442fe50513055e10ecce105c7d42b3a06c75804438087e1980c5f2337b19b2947b6f281be43fd52a3e1110fa5194cddc40fe19a856d7488b176e7bf2981cee1a285e24110b1d34f18fdeb8ed90b5e92d2f8fd8f28a45c5c77d63a42ad276f97cd4736c0ced691eafeedd30ea764260520934c3be477dfe758c23016e824fe06d5e3cc4e2c406f8d926f2135ff7a6548610b6a2b8607c7b5194ad43eacb9c4ea319f357731bfebb69f74b6448c64619be2e8de8609d9a6483214e319268cf7823aa0c9368cba956f26589cbb9cfcc4bde443c49b847b5f2d2a176afd4ca48f63821ad1acef822fe8cd8ce43d401e469ebf4712e232811ab211646d4ae8a912e7be3b18e6f3f1bdb9daab13bbf2c0b3f49a0e4255a0da06c78528fcdb727b43acfe1b3ca496f0bcd636ea712652eaab8863ebcf85085e7ec19ec15d183993008ffd87b2e91ad8ad6da43f4328d2623a08d692f284df96455264a4272ddce6b13c3021bcb4c12e149fa8de1c1962d10ab85e8753055b6c21592bcc32ec5c90b303878bd419415aff8add0efb5d56b06a6552ef967121b4ad1e74201ef8bbaaa37a448be7a7825b70294207d944db67343be27d6d2b9af8fd1fd234e29d6d3554520bc1792cc7467f2bb247623fd0a0b51a2a507b0fa93a290d6506b8fc3a7a3f20024b627ec7f98add948ea18d2fc8f6b80e7594a8a1fba0c6539a9747015332c288670b4ab2e118f0921cf70b0edbe02876368bfad40361846cfc9cbf9b9451b882c24a95729916345d07d831cd2f1842edad587605a11ede7c05f77972429d993350444dbb57fa4f4a44c8c6d3ae5dcf504c0d0b563c4476fc77ce7177f4d11e4bd4e243b53577531e45aaee020821b7048926ff354810adab070253cafdfb516f5108124959bfc43b3cdbd806a86d771269255a86b6e3b100c4cd25de25920ceb3430a722f503c61c60aef7041a3d7572421a0f4bdfb7e8ff7c49866c4bff0182183e3b022ce3fc0ca5428901943a75e658fc5da3a72dd8eee25e4a63cfa78bfdf69ea84f19c7bb7d863cb776a0c3a12b6c77e8858eaea32768cc4e46f3b3275744ecc6678cb1403b0ade23ac62ef15aa67ee152459294a0476361d97055e1bc83f6c17b4697388dd08b739bb605136fb475ecf10d1c7414bc80425d55c939b5dbe5a47f8348aec6a61433798b8e15de1453276cfd5090cb4b88fb06fe6961b0a683300fd14f61f221033c1312be96b2d8e2a831dbbfdfd7b1b211c6a45b51fd3412dbdf0f11f47981c2e543e76865f3d3ed71170c71a5e869854156c06376bffc5534032342487f044ed9f88182d689eddb9103d6747686a438d8bdeb5566e972ff6db3e607e60c61b96ac5876035e89d61e99a824860ec93f929e1ab597c200ba713eb8a3310ae6e940b4fbce34f97b9467c05dfd373bdc9b7ff762191a082c1314fa43f6b7f0aa00ada8b67b2f95a5c46f87bf64ab84751da74b5900b4fbd62393b65ba484dc9266b506bd4d1f896b444f1652de77d88f9604f1b4fb8054815ec525c89aae5bcfed5533eecb14a110f266fb4299fbde8602a9458bcb7a69c4ed90e458e8c59c28abc39d8c500e0c52956207045f98621bbecfcf5582e36b2e77239c1d34f05a04544cee4c8287a2cd2bb7325f0fcf9c4c8f96a097dc10b9af818c92686a1665a34e5e28c4cad588b70cd1aa7d77ab20ffbfb564945937783d81216e45b5bb66ad14328f93ff6c5af7bd2f2b244e0e2a68c86f61aa54c872b091e867f268e8c14ba5179847872daa2c2515f8f49b5432cfb40f1ed98dda1f2dab3b8ab560c3539b8a928312a08e8d4a462260d9fbdeb76df4871af3b57db2ade40072b3a361b729b7a7a8e094769b53d381375e897d72bef1b119d664d91d800aec9f30199af45fcb4e7a92779dacc1f9474bb4763ed5c49c3b9c27a1f36ce5fdb8cd87f4da36e8652655a77ae125d0b302b43d8233c9135fc85ba3eb6bd74cbfad177177e7766bd2f78b2fa7b8dfb38d47346de4753c22087a214adf1ee5602773b067eafb3afd90c72f587839f1ffe2f85c687276ca1d33ffce0e5ae6dff1eb0dcebe7396cd313280e78f7dc5640668053f2a42b23681cf319cd4481f409b257a1f1d4395a647961dadd730b305b187a3582f0dc76f5aa0bb849f7ff22d708066472d18234477bc54983707f679fde7bb78f2fdc92e9728157139680e26bc412260c1585ba5d303a0e091f6140688cb7ea9963ab12af6bc56c25e77567656c5113ada8f93645cffa6ace70a5e54b1e8ca499d6854778fdfc3b094ac7fc9bfd5f48b416c67e9d67244f217563699305584773233784f548fb17f565c75b748646a5d58c25ec530c86685a8c374d61b9bd6fff6e850760c6fc4ab87b0fb3a3d78b30fcf1c404529783c68ed5f812ed7c622b54962c8823da6d553fad3e2fede8fc750442d0e9f75e1d18b1e1c67387554f2122d57d6b28c0102d56a73e9f3dc2a0522731a9cb78bcebd7d1f5cebec6b5357da2eecdfe236de36b589e7e962873e1a0bc345726abdb9c87f4e7408aa3a412ae3bed83923032c20e8f16f8034fb1e55002ead637642c9b8a971a6c305e4eb6c46afcf83c36d42644b345969c498703370127ffbfdcf0e549e498c22839c6bbd06d52ec262186c1e7f3ac22a8cffec7280aa61bcf0012263d5502339ca10e235cd861f23d4de5d8c38a79508e47d31c8381a93eaa207fc389113ccf7c98bca9bc8e6d6351db7e1e23cea81e0f4e0083b071891dcb0425aea5623245cbc3484c367860df104e26514630ae1cb662b8f94aaaa2499b1e863fb7dcddbf8b2b1e04305d377f721ff3e3c74768af3b3f8226b638a15ce4185838d317c22529c81235e7307e957bec005f0085c3e414b14de03bfc42a27dd73fd0d8e2dc2d9e8457f9a827e3910909dbc88d6da3454f995470fe95755a66b568414b066b7d3879c005d7f42e0e4e54673668cf291e65f2a5f0a898a4575ca598bef3c7be75f1b4c3bc9627ed9ee569d8a92f31e3cb9920302b2eb1ff973391f6d045587303b2873bb65657d738f531917949c3e5f49f50b3242f726e2c4f7d77e3d1d2ebb9b91b0fbdb5f72ccbee15f5dbe97096a424d8e9c0476587a3a911c5d8eca4748d592dcab51d86f6d086c90050b7e02a3ed1c91281005d3eef6c87627572cba417afcbcb007c6dd2374ee419ae352da439341171c3e9cc7313d27ea65c3e537eb600f4fcf21624cdb8bdab1492f14e2775d901534332d8f472f8137fc6edd67dd6c191236944d218cad64844850086210c0b7770cd0deb08cd986716e48a6f3416dc94d885a3d412e08326d58597e234fabafb1a123d19adf986fb303f086e9dd7d52b2823939766a27aba98f407823654ae65966478ca8f144ac10660ae06826e7f3d32ee671c3591c77664055f6c507643647c8bb9312e1ead11dd1c1054202642ee07879f2c6aaa532393cca717698803402e36ceedf6ec98ef0b3fb08232beedeb84ca3daa51add52fd3addc88c72d4d57e4f2bfc392b5d0a8ff3db5ba23c6dfefec7f69624f7c2d425025fffc1c226f82e84e8225ac8c67beb792bf71ed20d1e0bb3e42472fc4ff408cda2ae6718df41178bd639f4288bce349ba053383e349115d99cba3b814b11e74b6078be334498a9a6e13f71bb3e96c780c61ee45ac27298bb11a356a7aed8c4aee3be31e7f566ebb9ece4520f708db6fa89d6a076ec2cd310142abbf29e5875a30c4dc42b299230b541fd649e489aa9b71e6e3afc4d8f65f3e9c5c6b981e169983ce415bc207d3be3173dc66ac472fc7af0bbad988f0037a548fe74f6c63045845db49628618f8deb0204373b74ffbe29784559d6b3cc70cb45ebc7cec4671982a71a45dcbdf2e16b38c2d41954fcbf019064f8", 0x1000, 0x11, 0x0, 0x2, r7}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x5, 0x7f, r0, &(0x7f0000001400)="bb0f293c9fac8e6b519797eaf63daabced696346a7fc951bd43f1aa3f6265bc6b925de70a83249c2383f781aba39300048b06dbf63e6a97f30aad2a062789cda8ed658d9d494ce993e88941ba992f645350d1c38bfdde921d7e60e6b4efe070260063da372ea73d554e381742a31443bc9c503638a1202cce3f9c0807efbb4c59b36d299529f3ff350b13f302682866d069520586cce9c32ca55f814", 0x9c, 0x9, 0x0, 0x2, r1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x3, 0xe66, r0, &(0x7f0000001500)="bc0d32b758eddc0b7ad4cd236310402cd09120c7dcfb1bf090bb3c15f7556c5dfee2104c77c78a5a9a9d47e329d21c1f1912f1aa3385c61e1b28d61ed597263b9155b961f7c3c8b8a69ad9d4b23460503fd8e95eeace577cff8ba62e5f235ccb12280c18659c720407250faf9bbcdf6424598eb0bb03686a066fc5973e39dde0325e8531d2c787296194f95ca1f0726f97a78d72fbcad62389d766e037fb3389d30ed0", 0xa3, 0x2, 0x0, 0x2, r1}]) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000001680)={0x0, 0x7ff, 0x424, '\x00', &(0x7f0000001640)=0xf4}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000016c0), 0x200580, 0x0) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3, r1}) (async) io_setup(0x6, &(0x7f0000000480)) (async) io_getevents(r2, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) (async) socket$rds(0x15, 0x5, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r4, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) eventfd2(0x7, 0x1) (async) eventfd(0x3) (async) io_submit(r2, 0x7, &(0x7f0000001600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f0000000040)="5ab97cfa1c15ff63e912f610d1331618b067cc82db8239dfe48f4980466d509ae54ceb28f7c10472ff97c80a5e866fb9ffc148b186f02ef76bd6d03ecd5829da7c532ad6a3a57fd704224712c8e53af3fc74da1762583ab6dedcdfbe0ebb600d357070fc7014b3036fabcfae41543c98b5123f94787e2cc7f20b65876bde8e5b7d524b1e1298d8714f4f6fc49a9959f0486edbafe3d22a37cacbc20e11", 0x9d, 0x5, 0x0, 0x1, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0xf3, r1, &(0x7f0000000180)="5ab4a54101a241ea83eec23b772d1381c336a31bed4b90dd9a001b6f9e3708f53eb275c9617ddc4a", 0x28, 0x1, 0x0, 0x0, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x1000, r5, &(0x7f0000000200)="f246c6a42010d3942971afc1b58505dc68832d1d835804973bc0a2e63d44df6db1d6a46713119ea65c929a406369b42ccafb9b66c3ed8ea988e6f22a0487578572227908d02c804a070f49dcfa2bd2b5be194934cbc80d8bf2e46ba4a1cf9958c6b0e10793692cba88d4c627c7c7859d65369d2ea54a6fe287c5d198bd09369723220ec57a15ac12af5a5483154bc4a68bcf8a5f715909116510a387be3607b2245e75e32382d4a082b7b94a1ae5aa1970", 0xb1, 0x8, 0x0, 0x2, r6}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000300)="747435826d98dd9014073c692f5addf11ce1e64fe136c132c65e169a08fa716de226", 0x22, 0x7, 0x0, 0x3, r0}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f00000003c0)="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", 0x1000, 0x11, 0x0, 0x2, r7}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x5, 0x7f, r0, &(0x7f0000001400)="bb0f293c9fac8e6b519797eaf63daabced696346a7fc951bd43f1aa3f6265bc6b925de70a83249c2383f781aba39300048b06dbf63e6a97f30aad2a062789cda8ed658d9d494ce993e88941ba992f645350d1c38bfdde921d7e60e6b4efe070260063da372ea73d554e381742a31443bc9c503638a1202cce3f9c0807efbb4c59b36d299529f3ff350b13f302682866d069520586cce9c32ca55f814", 0x9c, 0x9, 0x0, 0x2, r1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x3, 0xe66, r0, &(0x7f0000001500)="bc0d32b758eddc0b7ad4cd236310402cd09120c7dcfb1bf090bb3c15f7556c5dfee2104c77c78a5a9a9d47e329d21c1f1912f1aa3385c61e1b28d61ed597263b9155b961f7c3c8b8a69ad9d4b23460503fd8e95eeace577cff8ba62e5f235ccb12280c18659c720407250faf9bbcdf6424598eb0bb03686a066fc5973e39dde0325e8531d2c787296194f95ca1f0726f97a78d72fbcad62389d766e037fb3389d30ed0", 0xa3, 0x2, 0x0, 0x2, r1}]) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000001680)={0x0, 0x7ff, 0x424, '\x00', &(0x7f0000001640)=0xf4}) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000016c0), 0x200580, 0x0) (async) 05:32:30 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r1 = eventfd(0x1) read$eventfd(r1, &(0x7f0000000040), 0xb6) 05:32:30 executing program 4: ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000340)={0x18, 0x0, 0x0, 0xff}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0x18, 0x2, 0x20) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xbf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x80) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:30 executing program 2: ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000300)={0x690, 0xb09cd7b4492266c2, 0x300, 0x280, 0x400, 0x2, 0x2, 0x2, {0x3f, 0xb4, 0x1}, {0x1ff, 0x2, 0x1}, {0x1, 0x3ff, 0x1}, {0x7fffffff, 0xffffffff}, 0x0, 0x0, 0x5, 0xffffffff, 0x1, 0x9302, 0x9, 0x6, 0x2, 0x8001, 0x10001, 0x8, 0x10, 0x0, 0x2}) r0 = eventfd2(0x3, 0x1) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffa084, 0x3) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x668101, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xe71, 0xfffffffffffffffd, 0x7}) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x2) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r5) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000280)={0xd, 0xcc44, {0x56, 0x6, 0x2, {0xf8, 0xffff}, {0x6, 0x4}, @period={0x5d, 0xffff, 0x8000, 0x935e, 0xfff, {0x9, 0x0, 0x5, 0xfff}, 0x2, &(0x7f0000000240)=[0x9, 0x4]}}, {0x53, 0x9, 0x3, {0x1000}, {0x835, 0x5}, @cond=[{0x4, 0x4, 0x3f, 0xfff, 0x7fff}, {0x4000, 0x7, 0x3, 0x3, 0x7, 0x6}]}}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}}, 0x8000) r7 = eventfd(0x3) r8 = syz_open_dev$video(&(0x7f00000000c0), 0x93, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r8, 0x80845663, 0x0) read$eventfd(r7, &(0x7f00000001c0), 0x8) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000300)={0x690, 0xb09cd7b4492266c2, 0x300, 0x280, 0x400, 0x2, 0x2, 0x2, {0x3f, 0xb4, 0x1}, {0x1ff, 0x2, 0x1}, {0x1, 0x3ff, 0x1}, {0x7fffffff, 0xffffffff}, 0x0, 0x0, 0x5, 0xffffffff, 0x1, 0x9302, 0x9, 0x6, 0x2, 0x8001, 0x10001, 0x8, 0x10, 0x0, 0x2}) (async) eventfd2(0x3, 0x1) (async) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffa084, 0x3) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x668101, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) (async) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xe71, 0xfffffffffffffffd, 0x7}) (async) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x2) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r5) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000280)={0xd, 0xcc44, {0x56, 0x6, 0x2, {0xf8, 0xffff}, {0x6, 0x4}, @period={0x5d, 0xffff, 0x8000, 0x935e, 0xfff, {0x9, 0x0, 0x5, 0xfff}, 0x2, &(0x7f0000000240)=[0x9, 0x4]}}, {0x53, 0x9, 0x3, {0x1000}, {0x835, 0x5}, @cond=[{0x4, 0x4, 0x3f, 0xfff, 0x7fff}, {0x4000, 0x7, 0x3, 0x3, 0x7, 0x6}]}}) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}}, 0x8000) (async) eventfd(0x3) (async) syz_open_dev$video(&(0x7f00000000c0), 0x93, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r8, 0x80845663, 0x0) (async) read$eventfd(r7, &(0x7f00000001c0), 0x8) (async) 05:32:30 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3ff, 0x5, 0x9, 0x100000000}) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3ff, 0x5, 0x9, 0x100000000}) (async) 05:32:30 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) eventfd2(0x0, 0x0) r1 = eventfd(0x1) read$eventfd(r1, &(0x7f0000000040), 0xb6) 05:32:30 executing program 1: eventfd2(0x0, 0x0) io_setup(0x8, &(0x7f00000017c0)) 05:32:30 executing program 2: ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000300)={0x690, 0xb09cd7b4492266c2, 0x300, 0x280, 0x400, 0x2, 0x2, 0x2, {0x3f, 0xb4, 0x1}, {0x1ff, 0x2, 0x1}, {0x1, 0x3ff, 0x1}, {0x7fffffff, 0xffffffff}, 0x0, 0x0, 0x5, 0xffffffff, 0x1, 0x9302, 0x9, 0x6, 0x2, 0x8001, 0x10001, 0x8, 0x10, 0x0, 0x2}) (async) r0 = eventfd2(0x3, 0x1) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffa084, 0x3) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x668101, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xe71, 0xfffffffffffffffd, 0x7}) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x2) (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r5) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000280)={0xd, 0xcc44, {0x56, 0x6, 0x2, {0xf8, 0xffff}, {0x6, 0x4}, @period={0x5d, 0xffff, 0x8000, 0x935e, 0xfff, {0x9, 0x0, 0x5, 0xfff}, 0x2, &(0x7f0000000240)=[0x9, 0x4]}}, {0x53, 0x9, 0x3, {0x1000}, {0x835, 0x5}, @cond=[{0x4, 0x4, 0x3f, 0xfff, 0x7fff}, {0x4000, 0x7, 0x3, 0x3, 0x7, 0x6}]}}) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}}, 0x8000) (async) r7 = eventfd(0x3) (async) r8 = syz_open_dev$video(&(0x7f00000000c0), 0x93, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r8, 0x80845663, 0x0) read$eventfd(r7, &(0x7f00000001c0), 0x8) 05:32:30 executing program 4: ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000340)={0x18, 0x0, 0x0, 0xff}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0x18, 0x2, 0x20) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xbf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x80) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:30 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) (async) r1 = eventfd(0x1) read$eventfd(r1, &(0x7f0000000040), 0xb6) 05:32:30 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3ff, 0x5, 0x9, 0x100000000}) 05:32:30 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 05:32:30 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = eventfd(0x1) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={r1, 0xd39, 0x6, r2}) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x561481, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x8, &(0x7f0000001e80)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x83, r3, &(0x7f00000007c0)="38d71e0d8d042d4b7d30a9b6274576af28424be3806f92522aceb8ea998d4a314b2219590e8095d42c984d829a92efabd596a66dea3866e996def5ae15fa9711fcc0afa79c3a001844ac772beb521f617297fd7ae92b5d5c529e60fbe5c0cf7ae567a2d6311b9d236d180d05bdc60c390c59f0a10d42db23a2d4dbed08404d4946aa32d3829ccd0fe07d00ceffc52dbc027ae67d21a7a49da7894416c4960d7ad06e126db3b2c52e2d82f54aed906c96ca060779", 0xb4, 0x3, 0x0, 0x0, r0}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x5, 0x800, 0xffffffffffffffff, &(0x7f0000000a00)="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", 0x1000, 0x5, 0x0, 0x2}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000900)="a318d0aeb4c10e2fbd851da8b2170aa5f71a1a474310ed031d236376d028da085610dcd56e9bf96f345192390c61c3abeceb9db2ce9e0524459c58cb6dda8ce86192b4b092638ae6adb2541ab2c9ceca46dfd7cae5e76ae754f0874a62be97e7df42", 0x62, 0x1ff, 0x0, 0x1}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2, 0xb6, r1, &(0x7f0000001a40)="b4d47b77541877ae246c39bbea", 0xd, 0x8}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000001ac0)="b6463b173fa2d68e6edff0b547f94094e6a68c0da3e1df9bc66b183934f85d83515fce9b45fb6f9b18fcce45f3a9e67e4388bced5dde749b62c8e056fd23bb8ab1c88045a6f2aec06f4fb73862ef3aee4d0fb9131053d027dbf06b3178f0f8bbcbf9c82b65ced29a44af5d6e83441f53d22077d01e3b2c2737b3c22c3e2a2603ddb1faa2538abcfb63", 0x89, 0x6, 0x0, 0x1}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000001c00)="cb797852fdf3b22fcc351323e066ae20e5e1e668b316d8b3311b2d73366c1f3f9a4ca916e60aa739ea8d2fa75d8462849a7254633f6cf25ecf7b695bde3c2c0d23645a3b0e7a0b655c423e127bc1fbe31ebc0292f6f46dd5d6e7a10e7e04b669999dfb151344017d", 0x68, 0x2, 0x0, 0x2, r2}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000001d40)="319b44963caee6b08002b21d4369e2710f93db89c3b34989cdc6d4537954eb512a56fd2b95dfb686ba9a", 0x2a, 0xff, 0x0, 0x3}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x3, 0x1ff, r3, &(0x7f0000001dc0)="3e6e17466040d80c3c9bf8c5063940bb739d17d2987e997c418166468b826697d085c4a994c324568ef81ad018ca1419590c287a0e77a127f20666a15289f9892388293938d2b507911b18710c6776a16a8d1c7ae1cbca8dfb", 0x59, 0x8}]) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r7, 0x0, 0x0) r8 = socket(0x2a, 0x3, 0x2) io_submit(0x0, 0x7, &(0x7f0000000780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8000, r2, &(0x7f0000000200)="c582837fbf028023deb49a05e2b6230d286d4687188cfe7434f9c77561a1b94a850497bf32bccb5ada41452cdecc2d9476bc20f2c9979c284d6fc3264d5a7d5db6abe84aedab45c078e4f8a234d95bb200862d014c9501367f46", 0x5a, 0x3b0, 0x0, 0x3, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f00000002c0)="f68bb132bd76071591", 0x9, 0x2, 0x0, 0x1, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x3ab0, r0, &(0x7f0000000380)="7cb42e6d91", 0x5, 0x6982f3da, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000400)="4725f265687f29e56bb78bb3633d9b4c185d954ca406451bfbfc0bf80e57d3edab3eb9d42f2c11870c9e6a35b64e2ca00fcd522fc8296b1547e5151ed4a78d5fb2146c0be92e1fb89d8aa09ff496c74e981c9b3f4a184b839859c5fbdc8076b83d686347ec01594cdb4e3e40cb963a889f667bd081b441d281338a028017a89eea0f3e280223909578d6a8d8034ab28da411aec8e4250435a98f221b0be0d01c", 0xa0, 0x0, 0x0, 0x2, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000000500)="d914c9e913bc66a62fa7a5cb131a171c96ee9a5d6ef3f6db975de009fbefaf3bb5c71b35cd670bbae8c3c44c8ae31b39bdaa878361275203d6dc8ac37da030712b606107b6211e6f3f3dcafe11d0625c818cee89f47a53", 0x57, 0x3, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x6, r8, &(0x7f00000005c0)="ebdb98d9e819da0c1e539bf46c109dcc624fcfdab19a73967ab79f070d3947f990572132d8f4c546a11998532e5f99e66f2c6e8c463912c5fc6a13bdbf6c8b7ce16f11abdeb42141ce9f26d7b954c069fb3e5661d5cbc933f9fdbfdb3ac40cf9", 0x60, 0x5}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xf, 0x6, 0xffffffffffffffff, &(0x7f0000000680)="f766a48de486e0d1d37b92e00fb3c7f4cd1e705b5707d0679256469b47a1e3fe8f17a22fb42e62ff13fc72b2b3ce21f1b79a0579899612d10469d3b6bffd0a1d008607d72972a74ed2155d74fc109712532ce8ec0cc0b83bd9428e5ee66e86f8b8b1d623d3784a9d9edbb82b9e5cbaa307732b7b29e20f0e75ef0b9131476ea2e162d1abf506c0f815184e8503feb78ff27161366bbc21d98d619bbf29d359afe2edec6d61686a2177bc921650c02fce8f60", 0xb2, 0x80000001, 0x0, 0x2}]) write$vga_arbiter(r4, 0x0, 0x0) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000180)={0x6, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0]}) 05:32:30 executing program 1: eventfd2(0x0, 0x0) io_setup(0x8, &(0x7f00000017c0)) 05:32:30 executing program 2: r0 = eventfd2(0x7fe000, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) 05:32:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r4, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffd}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x24}}, 0x20000044) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_genetlink_get_family_id$batadv(0x0, r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x8040) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="24000000a6e08b36fc19e6148ae3e0c8a928855b10d73a834acb9caeb37bc975cd449a162f487691d0d4aae55e78b968d71faae51e29a4105ffa8d0efeb80ae55bcc1b3389ebc7050e938d69928bc91706adb8a91ee9930d1d9fdf38a2bf3538553c613aad3231c17de3ac25a03f6a47aa0117f9d890e0da8dd372cae254af7541b9c417a39cb3927ef0a3d0d95905a42e3d6e219977a64ff2c968", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf252800000008002c00090000000600060001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe3c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032bbd7000000000000800000005002e0001000000"], 0x1c}}, 0x0) 05:32:30 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x420400, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000040)={0x25, 0x2}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) read$eventfd(r3, &(0x7f0000000100), 0x8) 05:32:30 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async, rerun: 32) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) 05:32:31 executing program 2: r0 = eventfd2(0x7fe000, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) 05:32:31 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = eventfd(0x1) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={r1, 0xd39, 0x6, r2}) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x561481, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x8, &(0x7f0000001e80)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x83, r3, &(0x7f00000007c0)="38d71e0d8d042d4b7d30a9b6274576af28424be3806f92522aceb8ea998d4a314b2219590e8095d42c984d829a92efabd596a66dea3866e996def5ae15fa9711fcc0afa79c3a001844ac772beb521f617297fd7ae92b5d5c529e60fbe5c0cf7ae567a2d6311b9d236d180d05bdc60c390c59f0a10d42db23a2d4dbed08404d4946aa32d3829ccd0fe07d00ceffc52dbc027ae67d21a7a49da7894416c4960d7ad06e126db3b2c52e2d82f54aed906c96ca060779", 0xb4, 0x3, 0x0, 0x0, r0}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x5, 0x800, 0xffffffffffffffff, &(0x7f0000000a00)="88062ce06403a411595c9ea7a9609a30f125ba644e64b28f9ccd4b7b5b038576be8c825cc7febcc4258b1e11d2ba559c0718abae7c962fc1a663d8ada9fe1ebf2625585cab161719e295d1bce83b07484d932d51beb64b9a5aab3928e56d64e8f934584f28ed0149c0f1f3c5779fc9a06ba914a0ada2d7712be199e87020382b29988667ef2f03e79afd3c4304b6467336d34c10eac7e1529d1a401e37bc1a9a3cd5a982aa4deae1814fa71bedd34dbec07e9e332a723b6e434fdc95ea2aa8c2ea24cc813e437c13ca7178e18a236c9e1827202e33b95b497f984ccd78db8c13f3ba89efa0d5d1c85f4a0568a661195aa5a0894f95c995024fe67fbfdcdff8f60d43169eaabe756bcf64f929cbd53f0dfcb48155c37411190064edcfee18027b93c3d1af6b0f5cc8a8eb524f7a129377e720c2ee18e9d84a26c14b48e52b6a388af3850c16e7b8a77d387a296dd8ccad1f7ad1bb37adc89428dd18d0aa8675aabf1648c4a463777f0deeec62a13cd85576e8ecb93f8bc3bd8c20293b8499ef42440cec62d6def119180096d2c08e2ec53056e3039799e52b2d10ac64854f99c7e2c92677dfa2b27be0e74b8c415116281bd2aad51af7d0847371fb7cb1934137f6266734121f215168db61d85599d245fdeb3d102eb56e6766ead2eb78889e56ca768473cc93b440094f1232341bb1bd2e91def708aedb8e8f6b8411c19603279d81c32b2470b79e429d2fc6690fb37b93da53f71baa8c7431fc20fba4b25361b4a05128df088bd6af0edfbe3e0186b52e58f1ff3261594a5814811c55818c4b142af5d44841f7306bff2fa4482286d72b5525fae5e3dc647509a894c5736154b44c5a36bfdcbf21f0c684c23044b766d07a7b972856f3144c596a476626b396e1f944b3b8fc50e949aa32fbf6d936f65befbb69f906a0977df1ad3fd0de4e55eb89b28e1aafb2c8c1fecc94a08c97e75b101be52e2a3d0d27191030f9a53a0f5c7322d3c21b4090766736721c7b33ace10bc715d7ea914c3302c4d1f88dc5fbdd84522c3f329d0864a22dd7a1befbd52917876e3aaee5525b4a6e4aef4eb5ee93d7138945f28f5cdd368771e50f55c3a53bb5ee9e60dffbed1f3219f012d19ea05f5c913a98be57e5a9deab1f10516b89d5ce84e23a510b6ffcdb589acb147a70b74892d40329b8945e7c277d6fdc32eb9e7a8a9ede434716ebbe0c844119941a42f3d0b95a4fabc86e32736a05805d0835a21eabd0f5c086de9673db32c04a2aa22ae6a6851e9bff9ea8e45af99e9ab7a4e75d9d914677aa94f317266011c0e9e1fcd251b1ae1ed0f71a1a189d8b6ecfbd44ea3ce343daa5dacf771b163757fea3d4bf48a5a94afb147bb26dd2fab0f8482d615e86d9cdb19fa2bb0b0bbe77b9cd6d9ef3c803a94cc9d484602753f652c188eac5255eca181007b3263b85de9e4f8f6611ed2ac53aa7d6af9b0577d0c13ead2e81157703cdd8b3390426474ce90c70c70ebfb147d74ef787b3c357ce89dd6f8b47a8ff2441b8945633bd671be20d489b18967b5b5b812e10734b89430b4faf5040af91b82418703ebe819679b4afca9ffb557c86e445b1281b37bcac6f6e390f7a46cf80a8e969d725bd6635fd5a5e812636a7a4ce669dd57561e8eea31ba15c47ffcf77b081bafe65e745b3c5ac78309f94c1b276da383b3aad383d150fdbe1b62d152327788cdf8e79f240ba2af303c7fc0434a12a9cffbcd37d08d1793afd153bbaf6a3655ce1d92068dca93dfce65daf6f2278e39a989542011967753767a49460819bfa09a562ae7c3e7f0550a29978ee1fc9e5a5a740bd22e0eeba35bd914efa51df4bd7cf55d515d344e3116f49c2a6ed6a044bcfb538d32857b02248b2a00be44a9b20f01578be3453db09afbde5b164c66f8f36152e939033697b8349fde9d6a5c9cc1e5e293a1c1b1fd9f442cf0c6feeac8a554e13443bb5699e68ffda516aa5165fa23aedd65d0bccff74a7389db529869489e77629ef0accde40bc784216a1aabe37a08adb59a6ebad766071b864d52da9386d411931514037170fe2dbd89d34e6bd7d5341538009df943c05d8de915aebf7e50ed6fb755c489fd4bcbc8b12389e77327c1da7aafb60e18234d7ba944c4ab6db78bb2080919b9a77a4261ab66bfac0f9a702ebfb6347881952b23079b5142143ee1c4cfcc3f08d86dd5293fa995cc1bd77152184c3797d623b99f6655afd45a14f860e1c724570f5238f578c0cbf57db73b08df6c54e1510b64a58ae1e1f8017696e10f6dbc5cfd51bafca75cd22b6719a0c31e0c2d08d7073c3237d7b796723d5fafb5bc84d5a0ab9d3da48a2e68f7c955f2e482531ac28b02128b99c9e126591bc5f3a7b57461da75dde6dbedcc7464e920cfd5267f6d737d39d98cfba318229cde7a9553bee26f22adc7d466b67b903bbcee01bdf326c8b68c01d4f5c01f43a00b1c1b9185ada0b8580c7fb3111b54c43d355d4dd6ed67b618bf1af0d13d91b6bc1c34c57a8e052ac873b4f4ab09e212b81cdf9c13a2e39569cf4efa7346e31e418fbd645feb52f76d9a80695a39a362ed776efc7b7898a12f4be979818943b80e69abfc08fb91d313d5cc13cd6660a2b2f4b1958a31f6445083a26a45599dd8d18022d2cf3a97137e552b7c4822e94a8ee16467e5f47c33b79af1b756274937bfaec157f61db6bc5a26e554bce3d39a93edf6c37971db0a63dde93719bc750bdb7df6a6ee34d33956bc3d98db38b24c60f3b442b152bce0c244dfdf4f2f5d9dfc57579d5b0f4c10d786764ed195abd46e906824a7ebe32611989079bba7bfe3e70377e84de0cbef60dd67df197eecb970c7dc02ec09378c1af075c841987de3b4da034159ae618920236afe6ae9db57512ac71c3b81a98b682b4e487b7f2b8527cc10410d01d0a11f4d1daac2488b0846422da6b81038e0d073394fd7ab17031a433be8f9b734616252d5c0fcb95b2e22be1fba043c490d7c689a678184e222bacc0e7b3d048457ffc7335e79efc9cc9887c4ab645465ca1b19a67d808704be0a4b106d3043d9a5736120bdc33da89b400bd6593e29c75612bfd6b9bed1ec347c6b125dd2dbaad0733499eea4d0f78ddb47c2e807e99978c438ae359a51dfa34bcea01140130db9981f170b3658c020bc08746064624b8e48bf3e0cc11ef54b8a2b154dd5437910caabb6f96184fdb2d8796692bac8f2ee6afaa758f5728ab2ad188d5074b67f0572e6de423cb681aeb39a0072bedd1bab52ad2f0e169d86b9c1f68e85fe9aa447534c8204c41bbad863298a0367d5c85ca2f432edca15e8861451e3b34468d890fd50264a5b2c6f5448779112d6517d5d207d53b70e8e70174a57839a3819570171215d35616397aa3f8a58221e20a9ee173eb1a6956cfe1b5c45fc1486b75bc354ab7300a733e9f22569479bd5d8e4f8f16cdab24716e5a6f4fbf7ef54cffceb2bdec3a4201f84af393df0ac9fc9200b5425aeef4842a9d90e0e2a8222af0d17cdffb4f658839c5e84b0368605cc46c55489d67d227f908fcf7d606a7e1b1ea5b53e03faf094b9893980ee9ecfa05deceeb3d2c0a5e680d920cf1044d78e0249aaa8938291b7beeba6616b3ea331a7414a52c62d618a447df61b275b820aedf321c8fbf0a3c261f54a3a1b3661d1b0b5dfe3b63dac73ffa1ebdb11c7f433b5293a1ac35c5cb6cf594df064dfbc7bf4e381631867e2d910243e4bc8eab147daad708b7bbe90d9d5d1320163bf1bd1a4cf2ccf79c8b48ce8bf764fcb5523eec1c93b24e973ff2065446d79fcb434cfa82c469deb4abbce370445615231531a4a574bc72dc77b9245186514a60c1b9dcd6943b636552912323f6b47a92db114111fc2877428cf020f4250d2a98ee688691821746d457d6d31a699a51d76c9ef61ca26754799badb0ae08ba5d69e84456131559be7b2ccecd935f45bdec16a7a70d12188a287a1ad645c20e3b7283e6106c68258de2dd4615b0aba4672ab41b0fb3f50615dfc8621ab00866a7b8bcddd8926a26fd5bd1f990dfc105f87f089eae28b6186ed27c2aa26c81b427ddc80e7121023e163c8ced7696c71cb40d9863b8167da6fa5551e6477c3be4ece77c7dce33d4a9f99825c278397c7c0976249c018f81baec43de46f554be8f053333afc4b74cd7e02a389d7a68996512d411d1d50958c6ce846771b228f7bd6742882d0676ad49f7e2c45fba98f6fe8beee25729f4e9a90eba7c8c0bc61b9c369c75e5b02385e843e1985cd1d6b985cf73046325bcdb394851479675f671fd130f34fbee86326f1379eb090820fec83952b5e81308d10293017d2418c0263e4f86e8a8a75d506c067eaca5b76726a4b65d9c73b88d4b6374f26a170bfefbae0dc786798864fc926de807c16b17a8de6d4f9a6ec734e54b65ad641d922477d0eee47a0d7c7d14f3457930e538357973b97456a9320ccb8b763f5807dc30fcddd09f41b2d7ccbca908d06ef62d26deed5aa5082a5c0050636903d54ce1ccdd1e2f6f9340a85f8ebc1ec70a1d40131270ac84766e015859f90ca5f6a4930f489fb20d9cd0200d1f8a4d4cb1f874f60db34c135706d7de7f6405e1f062bcceb90d397cacfca41bc1e04699024b18022b185289da610243d6d37f82d39fb018ad585012bffee6e925baeef30d2b06b94c86202941d8a06242a54b8a320f5b8e714829fa0b92bea7433567e693a0470f74a1d12a972abaa485c7ae936fcd99dd75503ca5c523053aa59238ccc93e3174984d857a667d962acc510c0996b87074d205475694f081dc8da4c6917b31b0f16935bc058b221b8e959e1cbf93072afa43b4e53d5b66159a31596d54856db887d5640885bb5065cdd3d189d13389a7368d85a61682e1bdc6274ebe3bfc652ba2d1d59d370d42695e77fc8f9af2ad8ac2c8394d7593e89004966f3599936c3b5a2cfdad4a7155e79eb419df9f32f875b0daf99bc8902539ac8778fd2ba3689c384ac2835e19ae8c25d6ae2324e0f8a0d692304c85389f194e1ab6feb81f4e074a7dbf2d62e494073faff33e5565c053fd77b4c9a956484f4eac3a8810e9eca8518cfd370b523587a85152efe4739e6763abab3d4610474d3f8cc9a946f040a3526244c34008eadfe173ede37f623e34a271ac5cba755403c89adfcaf8139ed96e3c0b58fd3ea7f952df21a644b694f2d730b9bca4ae337f6bfb9c1dc8644a6f509efa1182b113f461fea64bd86b906cb336e32c8efe43b4615f40ba91939ea04f14fbd440844915a3118cfb23588f8aa372c0b917458abf7d51bc75bf7f2ae2033582aea41ec5f55c8f0daf8ea16f9d3838fd9ceefd4821a347bdea4d96601f539d349ea3f2ec268910f17cd277843579577931179fc10d1ae2f4752e42210cb2463eb5c3f33af77247275cf45cb35e50ea2fcdca3304a227c9fd3fef4ed9b660b1c3c720af2d26ceb2b21b7872a6ba615fc67ae308f750488898ecf12f8ba1937cfe3518a8128b23130c4b7de6a05851abb357823eefd4059b62e0f1aa68f8802992d59e9316b7466de66afc076e2c4bb76506648ffd4f3d88470839e5fea4677901e354ce68d80533a9308c96fe27e4a1da9fd7a6b64d99f3367314169d050400bc5d920b946e81b36c4a504a031273555b5168310526a347d81e77540980f4d92fc645396019541c6d7b08c6aa2425b81bc0090a346027b5fd6135fc59f7739c4082573e6215f575d18e1dd63d96acd9434a2084b0b34dd7cf2c7938a327074ef4b13f59081f8417718f67dccde3d5ec94", 0x1000, 0x5, 0x0, 0x2}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000900)="a318d0aeb4c10e2fbd851da8b2170aa5f71a1a474310ed031d236376d028da085610dcd56e9bf96f345192390c61c3abeceb9db2ce9e0524459c58cb6dda8ce86192b4b092638ae6adb2541ab2c9ceca46dfd7cae5e76ae754f0874a62be97e7df42", 0x62, 0x1ff, 0x0, 0x1}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2, 0xb6, r1, &(0x7f0000001a40)="b4d47b77541877ae246c39bbea", 0xd, 0x8}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000001ac0)="b6463b173fa2d68e6edff0b547f94094e6a68c0da3e1df9bc66b183934f85d83515fce9b45fb6f9b18fcce45f3a9e67e4388bced5dde749b62c8e056fd23bb8ab1c88045a6f2aec06f4fb73862ef3aee4d0fb9131053d027dbf06b3178f0f8bbcbf9c82b65ced29a44af5d6e83441f53d22077d01e3b2c2737b3c22c3e2a2603ddb1faa2538abcfb63", 0x89, 0x6, 0x0, 0x1}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000001c00)="cb797852fdf3b22fcc351323e066ae20e5e1e668b316d8b3311b2d73366c1f3f9a4ca916e60aa739ea8d2fa75d8462849a7254633f6cf25ecf7b695bde3c2c0d23645a3b0e7a0b655c423e127bc1fbe31ebc0292f6f46dd5d6e7a10e7e04b669999dfb151344017d", 0x68, 0x2, 0x0, 0x2, r2}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000001d40)="319b44963caee6b08002b21d4369e2710f93db89c3b34989cdc6d4537954eb512a56fd2b95dfb686ba9a", 0x2a, 0xff, 0x0, 0x3}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x3, 0x1ff, r3, &(0x7f0000001dc0)="3e6e17466040d80c3c9bf8c5063940bb739d17d2987e997c418166468b826697d085c4a994c324568ef81ad018ca1419590c287a0e77a127f20666a15289f9892388293938d2b507911b18710c6776a16a8d1c7ae1cbca8dfb", 0x59, 0x8}]) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r7, 0x0, 0x0) r8 = socket(0x2a, 0x3, 0x2) io_submit(0x0, 0x7, &(0x7f0000000780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8000, r2, &(0x7f0000000200)="c582837fbf028023deb49a05e2b6230d286d4687188cfe7434f9c77561a1b94a850497bf32bccb5ada41452cdecc2d9476bc20f2c9979c284d6fc3264d5a7d5db6abe84aedab45c078e4f8a234d95bb200862d014c9501367f46", 0x5a, 0x3b0, 0x0, 0x3, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f00000002c0)="f68bb132bd76071591", 0x9, 0x2, 0x0, 0x1, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x3ab0, r0, &(0x7f0000000380)="7cb42e6d91", 0x5, 0x6982f3da, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000400)="4725f265687f29e56bb78bb3633d9b4c185d954ca406451bfbfc0bf80e57d3edab3eb9d42f2c11870c9e6a35b64e2ca00fcd522fc8296b1547e5151ed4a78d5fb2146c0be92e1fb89d8aa09ff496c74e981c9b3f4a184b839859c5fbdc8076b83d686347ec01594cdb4e3e40cb963a889f667bd081b441d281338a028017a89eea0f3e280223909578d6a8d8034ab28da411aec8e4250435a98f221b0be0d01c", 0xa0, 0x0, 0x0, 0x2, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000000500)="d914c9e913bc66a62fa7a5cb131a171c96ee9a5d6ef3f6db975de009fbefaf3bb5c71b35cd670bbae8c3c44c8ae31b39bdaa878361275203d6dc8ac37da030712b606107b6211e6f3f3dcafe11d0625c818cee89f47a53", 0x57, 0x3, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x6, r8, &(0x7f00000005c0)="ebdb98d9e819da0c1e539bf46c109dcc624fcfdab19a73967ab79f070d3947f990572132d8f4c546a11998532e5f99e66f2c6e8c463912c5fc6a13bdbf6c8b7ce16f11abdeb42141ce9f26d7b954c069fb3e5661d5cbc933f9fdbfdb3ac40cf9", 0x60, 0x5}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xf, 0x6, 0xffffffffffffffff, &(0x7f0000000680)="f766a48de486e0d1d37b92e00fb3c7f4cd1e705b5707d0679256469b47a1e3fe8f17a22fb42e62ff13fc72b2b3ce21f1b79a0579899612d10469d3b6bffd0a1d008607d72972a74ed2155d74fc109712532ce8ec0cc0b83bd9428e5ee66e86f8b8b1d623d3784a9d9edbb82b9e5cbaa307732b7b29e20f0e75ef0b9131476ea2e162d1abf506c0f815184e8503feb78ff27161366bbc21d98d619bbf29d359afe2edec6d61686a2177bc921650c02fce8f60", 0xb2, 0x80000001, 0x0, 0x2}]) write$vga_arbiter(r4, 0x0, 0x0) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000180)={0x6, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0]}) eventfd2(0x0, 0x0) (async) eventfd(0x1) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r2, 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={r1, 0xd39, 0x6, r2}) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x561481, 0x0) (async) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) (async) io_submit(0x0, 0x8, &(0x7f0000001e80)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x83, r3, &(0x7f00000007c0)="38d71e0d8d042d4b7d30a9b6274576af28424be3806f92522aceb8ea998d4a314b2219590e8095d42c984d829a92efabd596a66dea3866e996def5ae15fa9711fcc0afa79c3a001844ac772beb521f617297fd7ae92b5d5c529e60fbe5c0cf7ae567a2d6311b9d236d180d05bdc60c390c59f0a10d42db23a2d4dbed08404d4946aa32d3829ccd0fe07d00ceffc52dbc027ae67d21a7a49da7894416c4960d7ad06e126db3b2c52e2d82f54aed906c96ca060779", 0xb4, 0x3, 0x0, 0x0, r0}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x5, 0x800, 0xffffffffffffffff, &(0x7f0000000a00)="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", 0x1000, 0x5, 0x0, 0x2}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000900)="a318d0aeb4c10e2fbd851da8b2170aa5f71a1a474310ed031d236376d028da085610dcd56e9bf96f345192390c61c3abeceb9db2ce9e0524459c58cb6dda8ce86192b4b092638ae6adb2541ab2c9ceca46dfd7cae5e76ae754f0874a62be97e7df42", 0x62, 0x1ff, 0x0, 0x1}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2, 0xb6, r1, &(0x7f0000001a40)="b4d47b77541877ae246c39bbea", 0xd, 0x8}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000001ac0)="b6463b173fa2d68e6edff0b547f94094e6a68c0da3e1df9bc66b183934f85d83515fce9b45fb6f9b18fcce45f3a9e67e4388bced5dde749b62c8e056fd23bb8ab1c88045a6f2aec06f4fb73862ef3aee4d0fb9131053d027dbf06b3178f0f8bbcbf9c82b65ced29a44af5d6e83441f53d22077d01e3b2c2737b3c22c3e2a2603ddb1faa2538abcfb63", 0x89, 0x6, 0x0, 0x1}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000001c00)="cb797852fdf3b22fcc351323e066ae20e5e1e668b316d8b3311b2d73366c1f3f9a4ca916e60aa739ea8d2fa75d8462849a7254633f6cf25ecf7b695bde3c2c0d23645a3b0e7a0b655c423e127bc1fbe31ebc0292f6f46dd5d6e7a10e7e04b669999dfb151344017d", 0x68, 0x2, 0x0, 0x2, r2}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000001d40)="319b44963caee6b08002b21d4369e2710f93db89c3b34989cdc6d4537954eb512a56fd2b95dfb686ba9a", 0x2a, 0xff, 0x0, 0x3}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x3, 0x1ff, r3, &(0x7f0000001dc0)="3e6e17466040d80c3c9bf8c5063940bb739d17d2987e997c418166468b826697d085c4a994c324568ef81ad018ca1419590c287a0e77a127f20666a15289f9892388293938d2b507911b18710c6776a16a8d1c7ae1cbca8dfb", 0x59, 0x8}]) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r6, 0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r7, 0x0, 0x0) (async) socket(0x2a, 0x3, 0x2) (async) io_submit(0x0, 0x7, &(0x7f0000000780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8000, r2, &(0x7f0000000200)="c582837fbf028023deb49a05e2b6230d286d4687188cfe7434f9c77561a1b94a850497bf32bccb5ada41452cdecc2d9476bc20f2c9979c284d6fc3264d5a7d5db6abe84aedab45c078e4f8a234d95bb200862d014c9501367f46", 0x5a, 0x3b0, 0x0, 0x3, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f00000002c0)="f68bb132bd76071591", 0x9, 0x2, 0x0, 0x1, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x3ab0, r0, &(0x7f0000000380)="7cb42e6d91", 0x5, 0x6982f3da, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000400)="4725f265687f29e56bb78bb3633d9b4c185d954ca406451bfbfc0bf80e57d3edab3eb9d42f2c11870c9e6a35b64e2ca00fcd522fc8296b1547e5151ed4a78d5fb2146c0be92e1fb89d8aa09ff496c74e981c9b3f4a184b839859c5fbdc8076b83d686347ec01594cdb4e3e40cb963a889f667bd081b441d281338a028017a89eea0f3e280223909578d6a8d8034ab28da411aec8e4250435a98f221b0be0d01c", 0xa0, 0x0, 0x0, 0x2, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000000500)="d914c9e913bc66a62fa7a5cb131a171c96ee9a5d6ef3f6db975de009fbefaf3bb5c71b35cd670bbae8c3c44c8ae31b39bdaa878361275203d6dc8ac37da030712b606107b6211e6f3f3dcafe11d0625c818cee89f47a53", 0x57, 0x3, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x6, r8, &(0x7f00000005c0)="ebdb98d9e819da0c1e539bf46c109dcc624fcfdab19a73967ab79f070d3947f990572132d8f4c546a11998532e5f99e66f2c6e8c463912c5fc6a13bdbf6c8b7ce16f11abdeb42141ce9f26d7b954c069fb3e5661d5cbc933f9fdbfdb3ac40cf9", 0x60, 0x5}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xf, 0x6, 0xffffffffffffffff, &(0x7f0000000680)="f766a48de486e0d1d37b92e00fb3c7f4cd1e705b5707d0679256469b47a1e3fe8f17a22fb42e62ff13fc72b2b3ce21f1b79a0579899612d10469d3b6bffd0a1d008607d72972a74ed2155d74fc109712532ce8ec0cc0b83bd9428e5ee66e86f8b8b1d623d3784a9d9edbb82b9e5cbaa307732b7b29e20f0e75ef0b9131476ea2e162d1abf506c0f815184e8503feb78ff27161366bbc21d98d619bbf29d359afe2edec6d61686a2177bc921650c02fce8f60", 0xb2, 0x80000001, 0x0, 0x2}]) (async) write$vga_arbiter(r4, 0x0, 0x0) (async) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000180)={0x6, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0]}) (async) 05:32:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r3) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r4, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffd}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x24}}, 0x20000044) (async) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) syz_genetlink_get_family_id$batadv(0x0, r1) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x8040) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="24000000a6e08b36fc19e6148ae3e0c8a928855b10d73a834acb9caeb37bc975cd449a162f487691d0d4aae55e78b968d71faae51e29a4105ffa8d0efeb80ae55bcc1b3389ebc7050e938d69928bc91706adb8a91ee9930d1d9fdf38a2bf3538553c613aad3231c17de3ac25a03f6a47aa0117f9d890e0da8dd372cae254af7541b9c417a39cb3927ef0a3d0d95905a42e3d6e219977a64ff2c968", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf252800000008002c00090000000600060001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe3c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032bbd7000000000000800000005002e0001000000"], 0x1c}}, 0x0) 05:32:31 executing program 1: eventfd2(0x0, 0x0) io_setup(0x8, &(0x7f00000017c0)) 05:32:31 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 05:32:31 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = eventfd(0xfff) read$eventfd(r1, &(0x7f0000000000), 0x8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x3, r0}) 05:32:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r4, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffd}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x24}}, 0x20000044) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_genetlink_get_family_id$batadv(0x0, r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x8040) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="24000000a6e08b36fc19e6148ae3e0c8a928855b10d73a834acb9caeb37bc975cd449a162f487691d0d4aae55e78b968d71faae51e29a4105ffa8d0efeb80ae55bcc1b3389ebc7050e938d69928bc91706adb8a91ee9930d1d9fdf38a2bf3538553c613aad3231c17de3ac25a03f6a47aa0117f9d890e0da8dd372cae254af7541b9c417a39cb3927ef0a3d0d95905a42e3d6e219977a64ff2c968", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf252800000008002c00090000000600060001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe3c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032bbd7000000000000800000005002e0001000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r3) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r4, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffd}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x24}}, 0x20000044) (async) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) syz_genetlink_get_family_id$batadv(0x0, r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x8040) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="24000000a6e08b36fc19e6148ae3e0c8a928855b10d73a834acb9caeb37bc975cd449a162f487691d0d4aae55e78b968d71faae51e29a4105ffa8d0efeb80ae55bcc1b3389ebc7050e938d69928bc91706adb8a91ee9930d1d9fdf38a2bf3538553c613aad3231c17de3ac25a03f6a47aa0117f9d890e0da8dd372cae254af7541b9c417a39cb3927ef0a3d0d95905a42e3d6e219977a64ff2c968", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf252800000008002c00090000000600060001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe3c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032bbd7000000000000800000005002e0001000000"], 0x1c}}, 0x0) (async) 05:32:31 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = eventfd(0x1) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={r1, 0xd39, 0x6, r2}) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x561481, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x8, &(0x7f0000001e80)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x83, r3, &(0x7f00000007c0)="38d71e0d8d042d4b7d30a9b6274576af28424be3806f92522aceb8ea998d4a314b2219590e8095d42c984d829a92efabd596a66dea3866e996def5ae15fa9711fcc0afa79c3a001844ac772beb521f617297fd7ae92b5d5c529e60fbe5c0cf7ae567a2d6311b9d236d180d05bdc60c390c59f0a10d42db23a2d4dbed08404d4946aa32d3829ccd0fe07d00ceffc52dbc027ae67d21a7a49da7894416c4960d7ad06e126db3b2c52e2d82f54aed906c96ca060779", 0xb4, 0x3, 0x0, 0x0, r0}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x5, 0x800, 0xffffffffffffffff, &(0x7f0000000a00)="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", 0x1000, 0x5, 0x0, 0x2}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000900)="a318d0aeb4c10e2fbd851da8b2170aa5f71a1a474310ed031d236376d028da085610dcd56e9bf96f345192390c61c3abeceb9db2ce9e0524459c58cb6dda8ce86192b4b092638ae6adb2541ab2c9ceca46dfd7cae5e76ae754f0874a62be97e7df42", 0x62, 0x1ff, 0x0, 0x1}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2, 0xb6, r1, &(0x7f0000001a40)="b4d47b77541877ae246c39bbea", 0xd, 0x8}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000001ac0)="b6463b173fa2d68e6edff0b547f94094e6a68c0da3e1df9bc66b183934f85d83515fce9b45fb6f9b18fcce45f3a9e67e4388bced5dde749b62c8e056fd23bb8ab1c88045a6f2aec06f4fb73862ef3aee4d0fb9131053d027dbf06b3178f0f8bbcbf9c82b65ced29a44af5d6e83441f53d22077d01e3b2c2737b3c22c3e2a2603ddb1faa2538abcfb63", 0x89, 0x6, 0x0, 0x1}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000001c00)="cb797852fdf3b22fcc351323e066ae20e5e1e668b316d8b3311b2d73366c1f3f9a4ca916e60aa739ea8d2fa75d8462849a7254633f6cf25ecf7b695bde3c2c0d23645a3b0e7a0b655c423e127bc1fbe31ebc0292f6f46dd5d6e7a10e7e04b669999dfb151344017d", 0x68, 0x2, 0x0, 0x2, r2}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000001d40)="319b44963caee6b08002b21d4369e2710f93db89c3b34989cdc6d4537954eb512a56fd2b95dfb686ba9a", 0x2a, 0xff, 0x0, 0x3}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x3, 0x1ff, r3, &(0x7f0000001dc0)="3e6e17466040d80c3c9bf8c5063940bb739d17d2987e997c418166468b826697d085c4a994c324568ef81ad018ca1419590c287a0e77a127f20666a15289f9892388293938d2b507911b18710c6776a16a8d1c7ae1cbca8dfb", 0x59, 0x8}]) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r7, 0x0, 0x0) r8 = socket(0x2a, 0x3, 0x2) io_submit(0x0, 0x7, &(0x7f0000000780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8000, r2, &(0x7f0000000200)="c582837fbf028023deb49a05e2b6230d286d4687188cfe7434f9c77561a1b94a850497bf32bccb5ada41452cdecc2d9476bc20f2c9979c284d6fc3264d5a7d5db6abe84aedab45c078e4f8a234d95bb200862d014c9501367f46", 0x5a, 0x3b0, 0x0, 0x3, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f00000002c0)="f68bb132bd76071591", 0x9, 0x2, 0x0, 0x1, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x3ab0, r0, &(0x7f0000000380)="7cb42e6d91", 0x5, 0x6982f3da, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000400)="4725f265687f29e56bb78bb3633d9b4c185d954ca406451bfbfc0bf80e57d3edab3eb9d42f2c11870c9e6a35b64e2ca00fcd522fc8296b1547e5151ed4a78d5fb2146c0be92e1fb89d8aa09ff496c74e981c9b3f4a184b839859c5fbdc8076b83d686347ec01594cdb4e3e40cb963a889f667bd081b441d281338a028017a89eea0f3e280223909578d6a8d8034ab28da411aec8e4250435a98f221b0be0d01c", 0xa0, 0x0, 0x0, 0x2, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000000500)="d914c9e913bc66a62fa7a5cb131a171c96ee9a5d6ef3f6db975de009fbefaf3bb5c71b35cd670bbae8c3c44c8ae31b39bdaa878361275203d6dc8ac37da030712b606107b6211e6f3f3dcafe11d0625c818cee89f47a53", 0x57, 0x3, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x6, r8, &(0x7f00000005c0)="ebdb98d9e819da0c1e539bf46c109dcc624fcfdab19a73967ab79f070d3947f990572132d8f4c546a11998532e5f99e66f2c6e8c463912c5fc6a13bdbf6c8b7ce16f11abdeb42141ce9f26d7b954c069fb3e5661d5cbc933f9fdbfdb3ac40cf9", 0x60, 0x5}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xf, 0x6, 0xffffffffffffffff, &(0x7f0000000680)="f766a48de486e0d1d37b92e00fb3c7f4cd1e705b5707d0679256469b47a1e3fe8f17a22fb42e62ff13fc72b2b3ce21f1b79a0579899612d10469d3b6bffd0a1d008607d72972a74ed2155d74fc109712532ce8ec0cc0b83bd9428e5ee66e86f8b8b1d623d3784a9d9edbb82b9e5cbaa307732b7b29e20f0e75ef0b9131476ea2e162d1abf506c0f815184e8503feb78ff27161366bbc21d98d619bbf29d359afe2edec6d61686a2177bc921650c02fce8f60", 0xb2, 0x80000001, 0x0, 0x2}]) write$vga_arbiter(r4, 0x0, 0x0) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000180)={0x6, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0]}) eventfd2(0x0, 0x0) (async) eventfd(0x1) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r2, 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={r1, 0xd39, 0x6, r2}) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x561481, 0x0) (async) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) (async) io_submit(0x0, 0x8, &(0x7f0000001e80)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x83, r3, &(0x7f00000007c0)="38d71e0d8d042d4b7d30a9b6274576af28424be3806f92522aceb8ea998d4a314b2219590e8095d42c984d829a92efabd596a66dea3866e996def5ae15fa9711fcc0afa79c3a001844ac772beb521f617297fd7ae92b5d5c529e60fbe5c0cf7ae567a2d6311b9d236d180d05bdc60c390c59f0a10d42db23a2d4dbed08404d4946aa32d3829ccd0fe07d00ceffc52dbc027ae67d21a7a49da7894416c4960d7ad06e126db3b2c52e2d82f54aed906c96ca060779", 0xb4, 0x3, 0x0, 0x0, r0}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x5, 0x800, 0xffffffffffffffff, &(0x7f0000000a00)="88062ce06403a411595c9ea7a9609a30f125ba644e64b28f9ccd4b7b5b038576be8c825cc7febcc4258b1e11d2ba559c0718abae7c962fc1a663d8ada9fe1ebf2625585cab161719e295d1bce83b07484d932d51beb64b9a5aab3928e56d64e8f934584f28ed0149c0f1f3c5779fc9a06ba914a0ada2d7712be199e87020382b29988667ef2f03e79afd3c4304b6467336d34c10eac7e1529d1a401e37bc1a9a3cd5a982aa4deae1814fa71bedd34dbec07e9e332a723b6e434fdc95ea2aa8c2ea24cc813e437c13ca7178e18a236c9e1827202e33b95b497f984ccd78db8c13f3ba89efa0d5d1c85f4a0568a661195aa5a0894f95c995024fe67fbfdcdff8f60d43169eaabe756bcf64f929cbd53f0dfcb48155c37411190064edcfee18027b93c3d1af6b0f5cc8a8eb524f7a129377e720c2ee18e9d84a26c14b48e52b6a388af3850c16e7b8a77d387a296dd8ccad1f7ad1bb37adc89428dd18d0aa8675aabf1648c4a463777f0deeec62a13cd85576e8ecb93f8bc3bd8c20293b8499ef42440cec62d6def119180096d2c08e2ec53056e3039799e52b2d10ac64854f99c7e2c92677dfa2b27be0e74b8c415116281bd2aad51af7d0847371fb7cb1934137f6266734121f215168db61d85599d245fdeb3d102eb56e6766ead2eb78889e56ca768473cc93b440094f1232341bb1bd2e91def708aedb8e8f6b8411c19603279d81c32b2470b79e429d2fc6690fb37b93da53f71baa8c7431fc20fba4b25361b4a05128df088bd6af0edfbe3e0186b52e58f1ff3261594a5814811c55818c4b142af5d44841f7306bff2fa4482286d72b5525fae5e3dc647509a894c5736154b44c5a36bfdcbf21f0c684c23044b766d07a7b972856f3144c596a476626b396e1f944b3b8fc50e949aa32fbf6d936f65befbb69f906a0977df1ad3fd0de4e55eb89b28e1aafb2c8c1fecc94a08c97e75b101be52e2a3d0d27191030f9a53a0f5c7322d3c21b4090766736721c7b33ace10bc715d7ea914c3302c4d1f88dc5fbdd84522c3f329d0864a22dd7a1befbd52917876e3aaee5525b4a6e4aef4eb5ee93d7138945f28f5cdd368771e50f55c3a53bb5ee9e60dffbed1f3219f012d19ea05f5c913a98be57e5a9deab1f10516b89d5ce84e23a510b6ffcdb589acb147a70b74892d40329b8945e7c277d6fdc32eb9e7a8a9ede434716ebbe0c844119941a42f3d0b95a4fabc86e32736a05805d0835a21eabd0f5c086de9673db32c04a2aa22ae6a6851e9bff9ea8e45af99e9ab7a4e75d9d914677aa94f317266011c0e9e1fcd251b1ae1ed0f71a1a189d8b6ecfbd44ea3ce343daa5dacf771b163757fea3d4bf48a5a94afb147bb26dd2fab0f8482d615e86d9cdb19fa2bb0b0bbe77b9cd6d9ef3c803a94cc9d484602753f652c188eac5255eca181007b3263b85de9e4f8f6611ed2ac53aa7d6af9b0577d0c13ead2e81157703cdd8b3390426474ce90c70c70ebfb147d74ef787b3c357ce89dd6f8b47a8ff2441b8945633bd671be20d489b18967b5b5b812e10734b89430b4faf5040af91b82418703ebe819679b4afca9ffb557c86e445b1281b37bcac6f6e390f7a46cf80a8e969d725bd6635fd5a5e812636a7a4ce669dd57561e8eea31ba15c47ffcf77b081bafe65e745b3c5ac78309f94c1b276da383b3aad383d150fdbe1b62d152327788cdf8e79f240ba2af303c7fc0434a12a9cffbcd37d08d1793afd153bbaf6a3655ce1d92068dca93dfce65daf6f2278e39a989542011967753767a49460819bfa09a562ae7c3e7f0550a29978ee1fc9e5a5a740bd22e0eeba35bd914efa51df4bd7cf55d515d344e3116f49c2a6ed6a044bcfb538d32857b02248b2a00be44a9b20f01578be3453db09afbde5b164c66f8f36152e939033697b8349fde9d6a5c9cc1e5e293a1c1b1fd9f442cf0c6feeac8a554e13443bb5699e68ffda516aa5165fa23aedd65d0bccff74a7389db529869489e77629ef0accde40bc784216a1aabe37a08adb59a6ebad766071b864d52da9386d411931514037170fe2dbd89d34e6bd7d5341538009df943c05d8de915aebf7e50ed6fb755c489fd4bcbc8b12389e77327c1da7aafb60e18234d7ba944c4ab6db78bb2080919b9a77a4261ab66bfac0f9a702ebfb6347881952b23079b5142143ee1c4cfcc3f08d86dd5293fa995cc1bd77152184c3797d623b99f6655afd45a14f860e1c724570f5238f578c0cbf57db73b08df6c54e1510b64a58ae1e1f8017696e10f6dbc5cfd51bafca75cd22b6719a0c31e0c2d08d7073c3237d7b796723d5fafb5bc84d5a0ab9d3da48a2e68f7c955f2e482531ac28b02128b99c9e126591bc5f3a7b57461da75dde6dbedcc7464e920cfd5267f6d737d39d98cfba318229cde7a9553bee26f22adc7d466b67b903bbcee01bdf326c8b68c01d4f5c01f43a00b1c1b9185ada0b8580c7fb3111b54c43d355d4dd6ed67b618bf1af0d13d91b6bc1c34c57a8e052ac873b4f4ab09e212b81cdf9c13a2e39569cf4efa7346e31e418fbd645feb52f76d9a80695a39a362ed776efc7b7898a12f4be979818943b80e69abfc08fb91d313d5cc13cd6660a2b2f4b1958a31f6445083a26a45599dd8d18022d2cf3a97137e552b7c4822e94a8ee16467e5f47c33b79af1b756274937bfaec157f61db6bc5a26e554bce3d39a93edf6c37971db0a63dde93719bc750bdb7df6a6ee34d33956bc3d98db38b24c60f3b442b152bce0c244dfdf4f2f5d9dfc57579d5b0f4c10d786764ed195abd46e906824a7ebe32611989079bba7bfe3e70377e84de0cbef60dd67df197eecb970c7dc02ec09378c1af075c841987de3b4da034159ae618920236afe6ae9db57512ac71c3b81a98b682b4e487b7f2b8527cc10410d01d0a11f4d1daac2488b0846422da6b81038e0d073394fd7ab17031a433be8f9b734616252d5c0fcb95b2e22be1fba043c490d7c689a678184e222bacc0e7b3d048457ffc7335e79efc9cc9887c4ab645465ca1b19a67d808704be0a4b106d3043d9a5736120bdc33da89b400bd6593e29c75612bfd6b9bed1ec347c6b125dd2dbaad0733499eea4d0f78ddb47c2e807e99978c438ae359a51dfa34bcea01140130db9981f170b3658c020bc08746064624b8e48bf3e0cc11ef54b8a2b154dd5437910caabb6f96184fdb2d8796692bac8f2ee6afaa758f5728ab2ad188d5074b67f0572e6de423cb681aeb39a0072bedd1bab52ad2f0e169d86b9c1f68e85fe9aa447534c8204c41bbad863298a0367d5c85ca2f432edca15e8861451e3b34468d890fd50264a5b2c6f5448779112d6517d5d207d53b70e8e70174a57839a3819570171215d35616397aa3f8a58221e20a9ee173eb1a6956cfe1b5c45fc1486b75bc354ab7300a733e9f22569479bd5d8e4f8f16cdab24716e5a6f4fbf7ef54cffceb2bdec3a4201f84af393df0ac9fc9200b5425aeef4842a9d90e0e2a8222af0d17cdffb4f658839c5e84b0368605cc46c55489d67d227f908fcf7d606a7e1b1ea5b53e03faf094b9893980ee9ecfa05deceeb3d2c0a5e680d920cf1044d78e0249aaa8938291b7beeba6616b3ea331a7414a52c62d618a447df61b275b820aedf321c8fbf0a3c261f54a3a1b3661d1b0b5dfe3b63dac73ffa1ebdb11c7f433b5293a1ac35c5cb6cf594df064dfbc7bf4e381631867e2d910243e4bc8eab147daad708b7bbe90d9d5d1320163bf1bd1a4cf2ccf79c8b48ce8bf764fcb5523eec1c93b24e973ff2065446d79fcb434cfa82c469deb4abbce370445615231531a4a574bc72dc77b9245186514a60c1b9dcd6943b636552912323f6b47a92db114111fc2877428cf020f4250d2a98ee688691821746d457d6d31a699a51d76c9ef61ca26754799badb0ae08ba5d69e84456131559be7b2ccecd935f45bdec16a7a70d12188a287a1ad645c20e3b7283e6106c68258de2dd4615b0aba4672ab41b0fb3f50615dfc8621ab00866a7b8bcddd8926a26fd5bd1f990dfc105f87f089eae28b6186ed27c2aa26c81b427ddc80e7121023e163c8ced7696c71cb40d9863b8167da6fa5551e6477c3be4ece77c7dce33d4a9f99825c278397c7c0976249c018f81baec43de46f554be8f053333afc4b74cd7e02a389d7a68996512d411d1d50958c6ce846771b228f7bd6742882d0676ad49f7e2c45fba98f6fe8beee25729f4e9a90eba7c8c0bc61b9c369c75e5b02385e843e1985cd1d6b985cf73046325bcdb394851479675f671fd130f34fbee86326f1379eb090820fec83952b5e81308d10293017d2418c0263e4f86e8a8a75d506c067eaca5b76726a4b65d9c73b88d4b6374f26a170bfefbae0dc786798864fc926de807c16b17a8de6d4f9a6ec734e54b65ad641d922477d0eee47a0d7c7d14f3457930e538357973b97456a9320ccb8b763f5807dc30fcddd09f41b2d7ccbca908d06ef62d26deed5aa5082a5c0050636903d54ce1ccdd1e2f6f9340a85f8ebc1ec70a1d40131270ac84766e015859f90ca5f6a4930f489fb20d9cd0200d1f8a4d4cb1f874f60db34c135706d7de7f6405e1f062bcceb90d397cacfca41bc1e04699024b18022b185289da610243d6d37f82d39fb018ad585012bffee6e925baeef30d2b06b94c86202941d8a06242a54b8a320f5b8e714829fa0b92bea7433567e693a0470f74a1d12a972abaa485c7ae936fcd99dd75503ca5c523053aa59238ccc93e3174984d857a667d962acc510c0996b87074d205475694f081dc8da4c6917b31b0f16935bc058b221b8e959e1cbf93072afa43b4e53d5b66159a31596d54856db887d5640885bb5065cdd3d189d13389a7368d85a61682e1bdc6274ebe3bfc652ba2d1d59d370d42695e77fc8f9af2ad8ac2c8394d7593e89004966f3599936c3b5a2cfdad4a7155e79eb419df9f32f875b0daf99bc8902539ac8778fd2ba3689c384ac2835e19ae8c25d6ae2324e0f8a0d692304c85389f194e1ab6feb81f4e074a7dbf2d62e494073faff33e5565c053fd77b4c9a956484f4eac3a8810e9eca8518cfd370b523587a85152efe4739e6763abab3d4610474d3f8cc9a946f040a3526244c34008eadfe173ede37f623e34a271ac5cba755403c89adfcaf8139ed96e3c0b58fd3ea7f952df21a644b694f2d730b9bca4ae337f6bfb9c1dc8644a6f509efa1182b113f461fea64bd86b906cb336e32c8efe43b4615f40ba91939ea04f14fbd440844915a3118cfb23588f8aa372c0b917458abf7d51bc75bf7f2ae2033582aea41ec5f55c8f0daf8ea16f9d3838fd9ceefd4821a347bdea4d96601f539d349ea3f2ec268910f17cd277843579577931179fc10d1ae2f4752e42210cb2463eb5c3f33af77247275cf45cb35e50ea2fcdca3304a227c9fd3fef4ed9b660b1c3c720af2d26ceb2b21b7872a6ba615fc67ae308f750488898ecf12f8ba1937cfe3518a8128b23130c4b7de6a05851abb357823eefd4059b62e0f1aa68f8802992d59e9316b7466de66afc076e2c4bb76506648ffd4f3d88470839e5fea4677901e354ce68d80533a9308c96fe27e4a1da9fd7a6b64d99f3367314169d050400bc5d920b946e81b36c4a504a031273555b5168310526a347d81e77540980f4d92fc645396019541c6d7b08c6aa2425b81bc0090a346027b5fd6135fc59f7739c4082573e6215f575d18e1dd63d96acd9434a2084b0b34dd7cf2c7938a327074ef4b13f59081f8417718f67dccde3d5ec94", 0x1000, 0x5, 0x0, 0x2}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000900)="a318d0aeb4c10e2fbd851da8b2170aa5f71a1a474310ed031d236376d028da085610dcd56e9bf96f345192390c61c3abeceb9db2ce9e0524459c58cb6dda8ce86192b4b092638ae6adb2541ab2c9ceca46dfd7cae5e76ae754f0874a62be97e7df42", 0x62, 0x1ff, 0x0, 0x1}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2, 0xb6, r1, &(0x7f0000001a40)="b4d47b77541877ae246c39bbea", 0xd, 0x8}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000001ac0)="b6463b173fa2d68e6edff0b547f94094e6a68c0da3e1df9bc66b183934f85d83515fce9b45fb6f9b18fcce45f3a9e67e4388bced5dde749b62c8e056fd23bb8ab1c88045a6f2aec06f4fb73862ef3aee4d0fb9131053d027dbf06b3178f0f8bbcbf9c82b65ced29a44af5d6e83441f53d22077d01e3b2c2737b3c22c3e2a2603ddb1faa2538abcfb63", 0x89, 0x6, 0x0, 0x1}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000001c00)="cb797852fdf3b22fcc351323e066ae20e5e1e668b316d8b3311b2d73366c1f3f9a4ca916e60aa739ea8d2fa75d8462849a7254633f6cf25ecf7b695bde3c2c0d23645a3b0e7a0b655c423e127bc1fbe31ebc0292f6f46dd5d6e7a10e7e04b669999dfb151344017d", 0x68, 0x2, 0x0, 0x2, r2}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000001d40)="319b44963caee6b08002b21d4369e2710f93db89c3b34989cdc6d4537954eb512a56fd2b95dfb686ba9a", 0x2a, 0xff, 0x0, 0x3}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x3, 0x1ff, r3, &(0x7f0000001dc0)="3e6e17466040d80c3c9bf8c5063940bb739d17d2987e997c418166468b826697d085c4a994c324568ef81ad018ca1419590c287a0e77a127f20666a15289f9892388293938d2b507911b18710c6776a16a8d1c7ae1cbca8dfb", 0x59, 0x8}]) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r6, 0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r7, 0x0, 0x0) (async) socket(0x2a, 0x3, 0x2) (async) io_submit(0x0, 0x7, &(0x7f0000000780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8000, r2, &(0x7f0000000200)="c582837fbf028023deb49a05e2b6230d286d4687188cfe7434f9c77561a1b94a850497bf32bccb5ada41452cdecc2d9476bc20f2c9979c284d6fc3264d5a7d5db6abe84aedab45c078e4f8a234d95bb200862d014c9501367f46", 0x5a, 0x3b0, 0x0, 0x3, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f00000002c0)="f68bb132bd76071591", 0x9, 0x2, 0x0, 0x1, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x3ab0, r0, &(0x7f0000000380)="7cb42e6d91", 0x5, 0x6982f3da, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000400)="4725f265687f29e56bb78bb3633d9b4c185d954ca406451bfbfc0bf80e57d3edab3eb9d42f2c11870c9e6a35b64e2ca00fcd522fc8296b1547e5151ed4a78d5fb2146c0be92e1fb89d8aa09ff496c74e981c9b3f4a184b839859c5fbdc8076b83d686347ec01594cdb4e3e40cb963a889f667bd081b441d281338a028017a89eea0f3e280223909578d6a8d8034ab28da411aec8e4250435a98f221b0be0d01c", 0xa0, 0x0, 0x0, 0x2, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000000500)="d914c9e913bc66a62fa7a5cb131a171c96ee9a5d6ef3f6db975de009fbefaf3bb5c71b35cd670bbae8c3c44c8ae31b39bdaa878361275203d6dc8ac37da030712b606107b6211e6f3f3dcafe11d0625c818cee89f47a53", 0x57, 0x3, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x6, r8, &(0x7f00000005c0)="ebdb98d9e819da0c1e539bf46c109dcc624fcfdab19a73967ab79f070d3947f990572132d8f4c546a11998532e5f99e66f2c6e8c463912c5fc6a13bdbf6c8b7ce16f11abdeb42141ce9f26d7b954c069fb3e5661d5cbc933f9fdbfdb3ac40cf9", 0x60, 0x5}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xf, 0x6, 0xffffffffffffffff, &(0x7f0000000680)="f766a48de486e0d1d37b92e00fb3c7f4cd1e705b5707d0679256469b47a1e3fe8f17a22fb42e62ff13fc72b2b3ce21f1b79a0579899612d10469d3b6bffd0a1d008607d72972a74ed2155d74fc109712532ce8ec0cc0b83bd9428e5ee66e86f8b8b1d623d3784a9d9edbb82b9e5cbaa307732b7b29e20f0e75ef0b9131476ea2e162d1abf506c0f815184e8503feb78ff27161366bbc21d98d619bbf29d359afe2edec6d61686a2177bc921650c02fce8f60", 0xb2, 0x80000001, 0x0, 0x2}]) (async) write$vga_arbiter(r4, 0x0, 0x0) (async) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000180)={0x6, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0]}) (async) 05:32:31 executing program 2: r0 = eventfd2(0x7fe000, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) eventfd2(0x7fe000, 0x0) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) 05:32:31 executing program 1: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) 05:32:31 executing program 5: r0 = eventfd2(0x7fe000, 0x0) (async, rerun: 32) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x420400, 0x0) (rerun: 32) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) read$eventfd(r2, &(0x7f00000000c0), 0x8) (async, rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000040)={0x25, 0x2}) (async, rerun: 64) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) (async, rerun: 64) read$eventfd(r3, &(0x7f0000000100), 0x8) (rerun: 64) 05:32:31 executing program 2: r0 = eventfd2(0x1ff, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 05:32:31 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = eventfd(0xfff) read$eventfd(r1, &(0x7f0000000000), 0x8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x3, r0}) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) eventfd(0xfff) (async) read$eventfd(r1, &(0x7f0000000000), 0x8) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x3, r0}) (async) 05:32:31 executing program 3: r0 = eventfd2(0x9, 0x80800) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = eventfd2(0xfffffffb, 0x180801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x1ff, 0xa7, r0}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x80000000) 05:32:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x9, 0xb659, 0x7f, 0x801, 0x1, 0x4fc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000200)="b02983dd0763033d3956fb99a93719b547da57dbee0c406d964d02178375c5775b0138d4ff3fcbdfb70e0efd8cba173a4af48f4d77c795e66441a820de7b513e920d0ba3ff7d76fff7a2aa6506812e66340a2f98bba1c887b7a989ab90c8cf5eb7e428e7a1500b43c9b9c68b70d646387f85ff20f3dccf3cc2d435a1a03055109cf19c306e", 0x85, 0x1, 0x0, 0x1}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b, 0x20000}, 0x14}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socket$packet(0x11, 0x0, 0x300) r4 = syz_open_dev$video(&(0x7f00000003c0), 0x8, 0x500) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000400)={0x4, "b1176a8a331b74a058d374b5f57f7ee56196d4ee9885d7f99f79de175dbb4b95", 0x3, 0x1}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c8dd0f857f114f1450c877f15f86637e7", @ANYRES16=r5, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:31 executing program 1: io_setup(0x0, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) 05:32:31 executing program 2: r0 = eventfd2(0x1ff, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) eventfd2(0x1ff, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) (async) 05:32:31 executing program 3: r0 = eventfd2(0x9, 0x80800) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async, rerun: 64) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) r2 = eventfd2(0xfffffffb, 0x180801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x1ff, 0xa7, r0}) (async, rerun: 32) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x80000000) (rerun: 32) 05:32:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x9, 0xb659, 0x7f, 0x801, 0x1, 0x4fc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000200)="b02983dd0763033d3956fb99a93719b547da57dbee0c406d964d02178375c5775b0138d4ff3fcbdfb70e0efd8cba173a4af48f4d77c795e66441a820de7b513e920d0ba3ff7d76fff7a2aa6506812e66340a2f98bba1c887b7a989ab90c8cf5eb7e428e7a1500b43c9b9c68b70d646387f85ff20f3dccf3cc2d435a1a03055109cf19c306e", 0x85, 0x1, 0x0, 0x1}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b, 0x20000}, 0x14}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socket$packet(0x11, 0x0, 0x300) r4 = syz_open_dev$video(&(0x7f00000003c0), 0x8, 0x500) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000400)={0x4, "b1176a8a331b74a058d374b5f57f7ee56196d4ee9885d7f99f79de175dbb4b95", 0x3, 0x1}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c8dd0f857f114f1450c877f15f86637e7", @ANYRES16=r5, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x9, 0xb659, 0x7f, 0x801, 0x1, 0x4fc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) (async) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000200)="b02983dd0763033d3956fb99a93719b547da57dbee0c406d964d02178375c5775b0138d4ff3fcbdfb70e0efd8cba173a4af48f4d77c795e66441a820de7b513e920d0ba3ff7d76fff7a2aa6506812e66340a2f98bba1c887b7a989ab90c8cf5eb7e428e7a1500b43c9b9c68b70d646387f85ff20f3dccf3cc2d435a1a03055109cf19c306e", 0x85, 0x1, 0x0, 0x1}]) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b, 0x20000}, 0x14}}, 0x0) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) socket$packet(0x11, 0x0, 0x300) (async) syz_open_dev$video(&(0x7f00000003c0), 0x8, 0x500) (async) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000400)={0x4, "b1176a8a331b74a058d374b5f57f7ee56196d4ee9885d7f99f79de175dbb4b95", 0x3, 0x1}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c8dd0f857f114f1450c877f15f86637e7", @ANYRES16=r5, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) (async) 05:32:31 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = eventfd(0xfff) read$eventfd(r1, &(0x7f0000000000), 0x8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x3, r0}) 05:32:31 executing program 5: r0 = eventfd2(0x7fe000, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x420400, 0x0) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) read$eventfd(r2, &(0x7f00000000c0), 0x8) (async) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000040)={0x25, 0x2}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) read$eventfd(r3, &(0x7f0000000100), 0x8) 05:32:31 executing program 1: io_setup(0x0, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) 05:32:32 executing program 3: r0 = eventfd2(0x9, 0x80800) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = eventfd2(0xfffffffb, 0x180801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x1ff, 0xa7, r0}) (async) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x80000000) 05:32:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x9, 0xb659, 0x7f, 0x801, 0x1, 0x4fc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000200)="b02983dd0763033d3956fb99a93719b547da57dbee0c406d964d02178375c5775b0138d4ff3fcbdfb70e0efd8cba173a4af48f4d77c795e66441a820de7b513e920d0ba3ff7d76fff7a2aa6506812e66340a2f98bba1c887b7a989ab90c8cf5eb7e428e7a1500b43c9b9c68b70d646387f85ff20f3dccf3cc2d435a1a03055109cf19c306e", 0x85, 0x1, 0x0, 0x1}]) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b, 0x20000}, 0x14}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) socket$packet(0x11, 0x0, 0x300) (async) r4 = syz_open_dev$video(&(0x7f00000003c0), 0x8, 0x500) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000400)={0x4, "b1176a8a331b74a058d374b5f57f7ee56196d4ee9885d7f99f79de175dbb4b95", 0x3, 0x1}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c8dd0f857f114f1450c877f15f86637e7", @ANYRES16=r5, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:32 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000140)}, 0x0, 0x0]) r6 = eventfd2(0x20, 0x80001) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r8 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000001c0)={0x3, r6}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r9, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x10000, &(0x7f0000000000), 0x8, r0, 0x1}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:32 executing program 1: io_setup(0x0, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) 05:32:32 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x4, 0x0, 0xffffffff, 0xbf4}}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x1, r2}) 05:32:32 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) r3 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x4, 0x0, 0xffffffff, 0xbf4}}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x1, r2}) 05:32:32 executing program 2: r0 = eventfd2(0x1ff, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 05:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000e17141b4428256f5af3dd30c2e9b1acfb6b489016314401c88c733c0706be83d88b4b1fe95a958e0c2c2fd5f54eec04856a299b47c67d6d23e85345ffc0aa9d2aad166f66cb013063eaf0ed8e6692097257999dd4792b85c77b99a698911d7060024cd2c300d4d126f52bf89039fbfe13686c2aa550b6a1dc2f824cffbc20f6bbf6a2e34c7e086711f54c120652931f33e59606e27d3", @ANYRES16=r3, @ANYBLOB="00002bbd70000000000005000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}]}, 0x1c}}, 0x4000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 05:32:32 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x4, 0x0, 0xffffffff, 0xbf4}}) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x1, r2}) 05:32:32 executing program 1: io_setup(0x6, 0x0) io_setup(0x8, &(0x7f00000017c0)) 05:32:32 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = eventfd(0xffff8000) r4 = eventfd(0x1f) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000000)="b0e000a45c2cf67bb7ff3cda28444550c033cfa3343e75def3d4b9854f9190e6830aa826b37333857bc2a208fe0e3ffde1b761025ceaf510d71b018cac602df764bcf7c3f1351b8bd4e6dbf1bed3a4ce801c3b4258c905", 0x57, 0x200, 0x0, 0x1, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0xff7f, r1, &(0x7f0000000140)="7c2112603580288726afee97c02f73590cb0d635ced69879402e929b0f971faf38fa4e3824e0b274cec53fa373d78c54b3500d135b26347f574b43ada0149163809dc5c4bb17c9a71e5ae461371ea7cd21edab907b556625a7573502b371d7bb169ad1e78e1eaf6d2d7e41cab33b", 0x6e, 0x3a, 0x0, 0x3, r0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x8, r2, &(0x7f0000000240)="b034bf11a2acc0bc619a54631121d244639dd558606ac745cf9c505923886d0022f67571186c83685fbed547326ee6d10bfa047f94568b885d4d31a4e0a27ea6bd1a5eb6fb730519f3c8b846b0500f3ec6d09ae7c073c3a906130679540d145f49fe314e212e56867864d7b69eae4d7e36cbbcf3f20086501b5ecc9fa84d058c4d399e3790ec85d4abb3a768edde470f705a72e1ee5d00a87b7cdd3cfb6daee65cc2d7de9b80c342690ea8118789a248401174f5ddedd2cacd6c4afe6b8493914a5a0ec35640cb1aa3eff3b3d766146e45c807795f0628e0a10a56ca6e6e96c36e8bf4c2f8ee46bd33e4aec55dcf1a04276644c3f5", 0xf5, 0x4, 0x0, 0x2, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000740)="2c9e84e827d873199cb181077e8eb99a2025cf8a31d6c958d4bbc6eb7629df260d4761888bf7f7b994ba6a7931f55de908bd872eedfb91837e4a1a465432b37342f31b0dfe967184dfe1fb0f0fc6b4477c2f56a49760d817bd86fd7165d39df1f88f767316b38066ae8093b5b103ca1b88dcc8bff9960d09fc503f6ebac364d361c56a874c366efa8351c9237785979ec8bce05e49063628e7925ec1441706b6ca2f6fbaeac70fa334", 0xa9, 0x6, 0x0, 0x0, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x7fff, r0, &(0x7f0000000480)="4756723d1aedea1da79012a7afd5756dbd0bfcd6578651b2836a123ac26af874abc92f5da99f7104d215aeb3de5c9d9ccc3319b362d657afcc36eb5e69956e7c470161a03759fe9489b36e980f262efbe61962ef82c6496e940f19bead3913b085c1d3c5d630197351470b0781888af051b9cef0af358e388734b20a2ce801f36fd5dd487f1f1f69b5e77cb7536f798df916197fb0c71fcdd83ab3fc6e8ad1560650b764bea5849a5272a985134a078e5278d60d6ca09b15b4c716aef66a2ec97dc62a7eb0379d45acc153ebb1e4eb4941a5dbc25ab3571b", 0xd8, 0x30c9, 0x0, 0x3, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x7f, r0, &(0x7f00000005c0)="9e016e40e420b75c843c1380c3d2507a155b99030353e9854b5539af261aa5e7df0ff4fbc37c862f9f57cb3e7935795b152405961d70bd76349c69b66f220c663a3c6c1e11fef3d8c99c965ce90cb86aa5c89558f83f635b081575b91afe10b5e0956473bb765e82a28d919d35ca5ea57782915c406a4fdb75366324a2e485a090dfd7785522f2118387ab1f0d59c56f5792390566698436e12913ae1fe6a3b0879078", 0xa3, 0x0, 0x0, 0x3, r4}]) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, 0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000700)={0x3}) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:32 executing program 0: r0 = eventfd2(0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) io_setup(0x101, &(0x7f0000000100)=0x0) (rerun: 64) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000140)}, 0x0, 0x0]) r6 = eventfd2(0x20, 0x80001) (async, rerun: 64) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) (async, rerun: 64) r8 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) (async) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000001c0)={0x3, r6}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r9, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x10000, &(0x7f0000000000), 0x8, r0, 0x1}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:32 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:32 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4040081) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0xff, 0x3f, r0}) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000001c0)={0x3, "245e2a5a13019ee387774d0278d47861dc04587d307f08550f40a98f99d04ed4", 0x2, 0x40, 0x2, 0x1ff, 0x0, 0x3, 0x5, 0x6}) socket$can_bcm(0x1d, 0x2, 0x2) 05:32:32 executing program 1: io_setup(0x6, 0x0) io_setup(0x8, &(0x7f00000017c0)) 05:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000e17141b4428256f5af3dd30c2e9b1acfb6b489016314401c88c733c0706be83d88b4b1fe95a958e0c2c2fd5f54eec04856a299b47c67d6d23e85345ffc0aa9d2aad166f66cb013063eaf0ed8e6692097257999dd4792b85c77b99a698911d7060024cd2c300d4d126f52bf89039fbfe13686c2aa550b6a1dc2f824cffbc20f6bbf6a2e34c7e086711f54c120652931f33e59606e27d3", @ANYRES16=r3, @ANYBLOB="00002bbd70000000000005000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}]}, 0x1c}}, 0x4000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 05:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000e17141b4428256f5af3dd30c2e9b1acfb6b489016314401c88c733c0706be83d88b4b1fe95a958e0c2c2fd5f54eec04856a299b47c67d6d23e85345ffc0aa9d2aad166f66cb013063eaf0ed8e6692097257999dd4792b85c77b99a698911d7060024cd2c300d4d126f52bf89039fbfe13686c2aa550b6a1dc2f824cffbc20f6bbf6a2e34c7e086711f54c120652931f33e59606e27d3", @ANYRES16=r3, @ANYBLOB="00002bbd70000000000005000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}]}, 0x1c}}, 0x4000000) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) 05:32:33 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = eventfd(0xffff8000) (async) r4 = eventfd(0x1f) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000000)="b0e000a45c2cf67bb7ff3cda28444550c033cfa3343e75def3d4b9854f9190e6830aa826b37333857bc2a208fe0e3ffde1b761025ceaf510d71b018cac602df764bcf7c3f1351b8bd4e6dbf1bed3a4ce801c3b4258c905", 0x57, 0x200, 0x0, 0x1, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0xff7f, r1, &(0x7f0000000140)="7c2112603580288726afee97c02f73590cb0d635ced69879402e929b0f971faf38fa4e3824e0b274cec53fa373d78c54b3500d135b26347f574b43ada0149163809dc5c4bb17c9a71e5ae461371ea7cd21edab907b556625a7573502b371d7bb169ad1e78e1eaf6d2d7e41cab33b", 0x6e, 0x3a, 0x0, 0x3, r0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x8, r2, &(0x7f0000000240)="b034bf11a2acc0bc619a54631121d244639dd558606ac745cf9c505923886d0022f67571186c83685fbed547326ee6d10bfa047f94568b885d4d31a4e0a27ea6bd1a5eb6fb730519f3c8b846b0500f3ec6d09ae7c073c3a906130679540d145f49fe314e212e56867864d7b69eae4d7e36cbbcf3f20086501b5ecc9fa84d058c4d399e3790ec85d4abb3a768edde470f705a72e1ee5d00a87b7cdd3cfb6daee65cc2d7de9b80c342690ea8118789a248401174f5ddedd2cacd6c4afe6b8493914a5a0ec35640cb1aa3eff3b3d766146e45c807795f0628e0a10a56ca6e6e96c36e8bf4c2f8ee46bd33e4aec55dcf1a04276644c3f5", 0xf5, 0x4, 0x0, 0x2, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000740)="2c9e84e827d873199cb181077e8eb99a2025cf8a31d6c958d4bbc6eb7629df260d4761888bf7f7b994ba6a7931f55de908bd872eedfb91837e4a1a465432b37342f31b0dfe967184dfe1fb0f0fc6b4477c2f56a49760d817bd86fd7165d39df1f88f767316b38066ae8093b5b103ca1b88dcc8bff9960d09fc503f6ebac364d361c56a874c366efa8351c9237785979ec8bce05e49063628e7925ec1441706b6ca2f6fbaeac70fa334", 0xa9, 0x6, 0x0, 0x0, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x7fff, r0, &(0x7f0000000480)="4756723d1aedea1da79012a7afd5756dbd0bfcd6578651b2836a123ac26af874abc92f5da99f7104d215aeb3de5c9d9ccc3319b362d657afcc36eb5e69956e7c470161a03759fe9489b36e980f262efbe61962ef82c6496e940f19bead3913b085c1d3c5d630197351470b0781888af051b9cef0af358e388734b20a2ce801f36fd5dd487f1f1f69b5e77cb7536f798df916197fb0c71fcdd83ab3fc6e8ad1560650b764bea5849a5272a985134a078e5278d60d6ca09b15b4c716aef66a2ec97dc62a7eb0379d45acc153ebb1e4eb4941a5dbc25ab3571b", 0xd8, 0x30c9, 0x0, 0x3, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x7f, r0, &(0x7f00000005c0)="9e016e40e420b75c843c1380c3d2507a155b99030353e9854b5539af261aa5e7df0ff4fbc37c862f9f57cb3e7935795b152405961d70bd76349c69b66f220c663a3c6c1e11fef3d8c99c965ce90cb86aa5c89558f83f635b081575b91afe10b5e0956473bb765e82a28d919d35ca5ea57782915c406a4fdb75366324a2e485a090dfd7785522f2118387ab1f0d59c56f5792390566698436e12913ae1fe6a3b0879078", 0xa3, 0x0, 0x0, 0x3, r4}]) (async, rerun: 64) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, 0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000700)={0x3}) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:33 executing program 1: io_setup(0x6, 0x0) io_setup(0x8, &(0x7f00000017c0)) 05:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r3, 0x301}, 0x14}}, 0x0) 05:32:33 executing program 1: io_setup(0x6, &(0x7f0000000480)) io_setup(0x0, &(0x7f00000017c0)) 05:32:33 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r3 = eventfd(0xffff8000) r4 = eventfd(0x1f) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000000)="b0e000a45c2cf67bb7ff3cda28444550c033cfa3343e75def3d4b9854f9190e6830aa826b37333857bc2a208fe0e3ffde1b761025ceaf510d71b018cac602df764bcf7c3f1351b8bd4e6dbf1bed3a4ce801c3b4258c905", 0x57, 0x200, 0x0, 0x1, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0xff7f, r1, &(0x7f0000000140)="7c2112603580288726afee97c02f73590cb0d635ced69879402e929b0f971faf38fa4e3824e0b274cec53fa373d78c54b3500d135b26347f574b43ada0149163809dc5c4bb17c9a71e5ae461371ea7cd21edab907b556625a7573502b371d7bb169ad1e78e1eaf6d2d7e41cab33b", 0x6e, 0x3a, 0x0, 0x3, r0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x8, r2, &(0x7f0000000240)="b034bf11a2acc0bc619a54631121d244639dd558606ac745cf9c505923886d0022f67571186c83685fbed547326ee6d10bfa047f94568b885d4d31a4e0a27ea6bd1a5eb6fb730519f3c8b846b0500f3ec6d09ae7c073c3a906130679540d145f49fe314e212e56867864d7b69eae4d7e36cbbcf3f20086501b5ecc9fa84d058c4d399e3790ec85d4abb3a768edde470f705a72e1ee5d00a87b7cdd3cfb6daee65cc2d7de9b80c342690ea8118789a248401174f5ddedd2cacd6c4afe6b8493914a5a0ec35640cb1aa3eff3b3d766146e45c807795f0628e0a10a56ca6e6e96c36e8bf4c2f8ee46bd33e4aec55dcf1a04276644c3f5", 0xf5, 0x4, 0x0, 0x2, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000740)="2c9e84e827d873199cb181077e8eb99a2025cf8a31d6c958d4bbc6eb7629df260d4761888bf7f7b994ba6a7931f55de908bd872eedfb91837e4a1a465432b37342f31b0dfe967184dfe1fb0f0fc6b4477c2f56a49760d817bd86fd7165d39df1f88f767316b38066ae8093b5b103ca1b88dcc8bff9960d09fc503f6ebac364d361c56a874c366efa8351c9237785979ec8bce05e49063628e7925ec1441706b6ca2f6fbaeac70fa334", 0xa9, 0x6, 0x0, 0x0, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x7fff, r0, &(0x7f0000000480)="4756723d1aedea1da79012a7afd5756dbd0bfcd6578651b2836a123ac26af874abc92f5da99f7104d215aeb3de5c9d9ccc3319b362d657afcc36eb5e69956e7c470161a03759fe9489b36e980f262efbe61962ef82c6496e940f19bead3913b085c1d3c5d630197351470b0781888af051b9cef0af358e388734b20a2ce801f36fd5dd487f1f1f69b5e77cb7536f798df916197fb0c71fcdd83ab3fc6e8ad1560650b764bea5849a5272a985134a078e5278d60d6ca09b15b4c716aef66a2ec97dc62a7eb0379d45acc153ebb1e4eb4941a5dbc25ab3571b", 0xd8, 0x30c9, 0x0, 0x3, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x7f, r0, &(0x7f00000005c0)="9e016e40e420b75c843c1380c3d2507a155b99030353e9854b5539af261aa5e7df0ff4fbc37c862f9f57cb3e7935795b152405961d70bd76349c69b66f220c663a3c6c1e11fef3d8c99c965ce90cb86aa5c89558f83f635b081575b91afe10b5e0956473bb765e82a28d919d35ca5ea57782915c406a4fdb75366324a2e485a090dfd7785522f2118387ab1f0d59c56f5792390566698436e12913ae1fe6a3b0879078", 0xa3, 0x0, 0x0, 0x3, r4}]) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000700)={0x3}) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r3, 0x301}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x201}, 0x14}}, 0x0) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r3, 0x301}, 0x14}}, 0x0) (async) 05:32:33 executing program 0: r0 = eventfd2(0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000140)}, 0x0, 0x0]) (async) r6 = eventfd2(0x20, 0x80001) (async) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) (async) r8 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) (async) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000001c0)={0x3, r6}) (async) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r9, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x10000, &(0x7f0000000000), 0x8, r0, 0x1}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:33 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) [ 3081.637061][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.637094][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 05:32:33 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4040081) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0xff, 0x3f, r0}) (async) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000001c0)={0x3, "245e2a5a13019ee387774d0278d47861dc04587d307f08550f40a98f99d04ed4", 0x2, 0x40, 0x2, 0x1ff, 0x0, 0x3, 0x5, 0x6}) (async) socket$can_bcm(0x1d, 0x2, 0x2) 05:32:33 executing program 5: write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000000c0)={0x0, 0xff}) 05:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x201}, 0x14}}, 0x0) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r3, 0x301}, 0x14}}, 0x0) 05:32:33 executing program 1: io_setup(0x6, &(0x7f0000000480)) io_setup(0x0, &(0x7f00000017c0)) 05:32:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80482, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3ca00220}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd7000fddb5f251e000000050012000000000000000000000000000536b682a59c2dc67c68f08b751617a0fa9d85cc2ed72ff51126b1799f54482c3c13d09cb72cbc61088191f9c54f25e2fa457bfa9b83737309b12d49398704ae613c9878da7ba3f798d7dea357c0d80d268aed5a9ca2e0219394003a6898a5b4170435064de922e1a5ff69c7c367d261556b3301876e"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x80) 05:32:34 executing program 5: write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000000c0)={0x0, 0xff}) 05:32:34 executing program 1: io_setup(0x6, &(0x7f0000000480)) io_setup(0x0, &(0x7f00000017c0)) 05:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3ca00220}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd7000fddb5f251e000000050012000000000000000000000000000536b682a59c2dc67c68f08b751617a0fa9d85cc2ed72ff51126b1799f54482c3c13d09cb72cbc61088191f9c54f25e2fa457bfa9b83737309b12d49398704ae613c9878da7ba3f798d7dea357c0d80d268aed5a9ca2e0219394003a6898a5b4170435064de922e1a5ff69c7c367d261556b3301876e"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3ca00220}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd7000fddb5f251e000000050012000000000000000000000000000536b682a59c2dc67c68f08b751617a0fa9d85cc2ed72ff51126b1799f54482c3c13d09cb72cbc61088191f9c54f25e2fa457bfa9b83737309b12d49398704ae613c9878da7ba3f798d7dea357c0d80d268aed5a9ca2e0219394003a6898a5b4170435064de922e1a5ff69c7c367d261556b3301876e"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x80) (async) 05:32:34 executing program 5: write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000000c0)={0x0, 0xff}) 05:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async, rerun: 32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3ca00220}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd7000fddb5f251e000000050012000000000000000000000000000536b682a59c2dc67c68f08b751617a0fa9d85cc2ed72ff51126b1799f54482c3c13d09cb72cbc61088191f9c54f25e2fa457bfa9b83737309b12d49398704ae613c9878da7ba3f798d7dea357c0d80d268aed5a9ca2e0219394003a6898a5b4170435064de922e1a5ff69c7c367d261556b3301876e"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x80) 05:32:34 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:34 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80482, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:34 executing program 1: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, 0x0) 05:32:34 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4040081) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0xff, 0x3f, r0}) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000001c0)={0x3, "245e2a5a13019ee387774d0278d47861dc04587d307f08550f40a98f99d04ed4", 0x2, 0x40, 0x2, 0x1ff, 0x0, 0x3, 0x5, 0x6}) socket$can_bcm(0x1d, 0x2, 0x2) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)) (async) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4040081) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0xff, 0x3f, r0}) (async) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000001c0)={0x3, "245e2a5a13019ee387774d0278d47861dc04587d307f08550f40a98f99d04ed4", 0x2, 0x40, 0x2, 0x1ff, 0x0, 0x3, 0x5, 0x6}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) 05:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r1, 0x20}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 05:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r1, 0x20}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 05:32:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80482, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:34 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) (async, rerun: 32) read$eventfd(r0, &(0x7f0000000100), 0x8) (rerun: 32) 05:32:34 executing program 1: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, 0x0) 05:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r1, 0x20}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 05:32:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000380)={0x2, 0x1}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_open_dev$video(&(0x7f0000000640), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0x80086601, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24042}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000180)={0x0, 0x9}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100025bd7000ffdbdf250200000005003800010000000800390008000000050029000000000008003a000100000008000b007f00000005002a0000000000080032000200007969000900ffffffff7fff0000080231000500000008000b0007000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80800) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0103000000000000000000ff3b000000000000000000"], 0x1c}}, 0x0) 05:32:35 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000280)={0xf000000, 0x0, 0xc9, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0xa20933, 0x6, '\x00', @p_u8=&(0x7f0000000200)=0x4}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048840}, 0x20000000) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0xd000, &(0x7f0000000180), 0x8, r0}) 05:32:35 executing program 1: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, 0x0) 05:32:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000380)={0x2, 0x1}) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_open_dev$video(&(0x7f0000000640), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0x80086601, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24042}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000180)={0x0, 0x9}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100025bd7000ffdbdf250200000005003800010000000800390008000000050029000000000008003a000100000008000b007f00000005002a0000000000080032000200007969000900ffffffff7fff0000080231000500000008000b0007000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80800) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0103000000000000000000ff3b000000000000000000"], 0x1c}}, 0x0) 05:32:35 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffa081, 0x8) 05:32:35 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = eventfd2(0x1, 0x800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x1, &(0x7f0000000040), 0x1, r1, 0x8}) 05:32:35 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) 05:32:35 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000280)={0xf000000, 0x0, 0xc9, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0xa20933, 0x6, '\x00', @p_u8=&(0x7f0000000200)=0x4}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048840}, 0x20000000) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0xd000, &(0x7f0000000180), 0x8, r0}) eventfd2(0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000280)={0xf000000, 0x0, 0xc9, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0xa20933, 0x6, '\x00', @p_u8=&(0x7f0000000200)=0x4}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048840}, 0x20000000) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0xd000, &(0x7f0000000180), 0x8, r0}) (async) 05:32:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000380)={0x2, 0x1}) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) r2 = syz_open_dev$video(&(0x7f0000000640), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0x80086601, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00ff03000000fb092000000872f5ba6ac4e16157e73fdd80c9b2b64d6910173d5f2cc69bff5bbd27b654d2c6dd29a2e5d5bf067d4cafd01f61a599713ebe5d3bd6fe3038344b9443355a893b29a74547f78cd669920f4adc5cd96f14bfca3e0807ce49174647ce4ec5fbc3d32d9d57e519cd5a03c4c4cb8db56174b23f5e93172eaf62e35401d1dda20685f7b644ab49f9cb9671674f45da506edb3eb6afa96df1442ca0f951abd92bcac138c0a954d449f00d3aa8eaa317b8513a337f09fe0329fd18c8b167d088524bf29b9cf7ac500d64ae3b542e387b953b921f682b2118104f98f484493f70f64c9ca590c14a0cd64fe19caaae7a323474dad3221e08e4d9ba9cb8768b65ed9e86e4eee5452bb69e7eb3695b7b6916199ed9e7175b3966446f22eb640876a034a77ce9e64ea747d1c8e47e6d867494311dd57611d792e70309dc43106cd9ef7fbb99a0604cb00454de3f65e2b9651a2100789257129920f2319b455f1773e5efc4607e610f2a7a1a2b2b1a39d27659d4f39c6c"], 0x1c}, 0x1, 0x0, 0x0, 0x24042}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000180)={0x0, 0x9}) (async) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100025bd7000ffdbdf250200000005003800010000000800390008000000050029000000000008003a000100000008000b007f00000005002a0000000000080032000200007969000900ffffffff7fff0000080231000500000008000b0007000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80800) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0103000000000000000000ff3b000000000000000000"], 0x1c}}, 0x0) 05:32:35 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000380)={0x2, 0x1}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_open_dev$video(&(0x7f0000000640), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0x80086601, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00ff03000000fb092000000872f5ba6ac4e16157e73fdd80c9b2b64d6910173d5f2cc69bff5bbd27b654d2c6dd29a2e5d5bf067d4cafd01f61a599713ebe5d3bd6fe3038344b9443355a893b29a74547f78cd669920f4adc5cd96f14bfca3e0807ce49174647ce4ec5fbc3d32d9d57e519cd5a03c4c4cb8db56174b23f5e93172eaf62e35401d1dda20685f7b644ab49f9cb9671674f45da506edb3eb6afa96df1442ca0f951abd92bcac138c0a954d449f00d3aa8eaa317b8513a337f09fe0329fd18c8b167d088524bf29b9cf7ac500d64ae3b542e387b953b921f682b2118104f98f484493f70f64c9ca590c14a0cd64fe19caaae7a323474dad3221e08e4d9ba9cb8768b65ed9e86e4eee5452bb69e7eb3695b7b6916199ed9e7175b3966446f22eb640876a034a77ce9e64ea747d1c8e47e6d867494311dd57611d792e70309dc43106cd9ef7fbb99a0604cb00454de3f65e2b9651a2100789257129920f2319b455f1773e5efc4607e610f2a7a1a2b2b1a39d27659d4f39c6c"], 0x1c}, 0x1, 0x0, 0x0, 0x24042}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000180)={0x0, 0x9}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100025bd7000ffdbdf250200000005003800010000000800390008000000050029000000000008003a000100000008000b007f00000005002a0000000000080032000200007969000900ffffffff7fff0000080231000500000008000b0007000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80800) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0103000000000000000000ff3b000000000000000000"], 0x1c}}, 0x0) 05:32:35 executing program 3: r0 = eventfd2(0x0, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000280)={0xf000000, 0x0, 0xc9, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0xa20933, 0x6, '\x00', @p_u8=&(0x7f0000000200)=0x4}}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$batadv(0x0, r2) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048840}, 0x20000000) (async, rerun: 32) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async, rerun: 32) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0xd000, &(0x7f0000000180), 0x8, r0}) 05:32:35 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x3ff, 0xe0880000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00903, 0x3, '\x00', @p_u16=&(0x7f0000000040)=0x9}}) 05:32:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3ca00220}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd7000fddb5f251e000000050012000000000000000000000000000536b682a59c2dc67c68f08b751617a0fa9d85cc2ed72ff51126b1799f54482c3c13d09cb72cbc61088191f9c54f25e2fa457bfa9b83737309b12d49398704ae613c9878da7ba3f798d7dea357c0d80d268aed5a9ca2e0219394003a6898a5b4170435064de922e1a5ff69c7c367d261556b3301876e"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x80) 05:32:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x22f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 05:32:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x201}, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r3, 0x301}, 0x14}}, 0x0) 05:32:35 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x3ff, 0xe0880000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00903, 0x3, '\x00', @p_u16=&(0x7f0000000040)=0x9}}) 05:32:36 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffa081, 0x8) 05:32:36 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = eventfd2(0x1, 0x800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x1, &(0x7f0000000040), 0x1, r1, 0x8}) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) eventfd2(0x1, 0x800) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x1, &(0x7f0000000040), 0x1, r1, 0x8}) (async) 05:32:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000}, 0x1) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x22f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 05:32:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) r3 = socket(0x2c, 0xe, 0x100) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 05:32:36 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x3ff, 0xe0880000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00903, 0x3, '\x00', @p_u16=&(0x7f0000000040)=0x9}}) 05:32:36 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000140)}, 0x0, 0x0]) r6 = eventfd2(0x20, 0x80001) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r8 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000001c0)={0x3, r6}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r9, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x10000, &(0x7f0000000000), 0x8, r0, 0x1}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:36 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x28080) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x7, @pix={0x326, 0x21, 0x20303159, 0x3, 0x6, 0x0, 0x7, 0xf4f, 0x1, 0x6}}) r1 = eventfd2(0x7fe000, 0x0) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r2 = syz_open_dev$video(&(0x7f00000000c0), 0xf6b, 0x4aa180) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000240)=0x8) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000040)={0x2e, 0x1}) read$eventfd(r1, &(0x7f0000000100), 0x8) 05:32:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000}, 0x1) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x22f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (rerun: 32) 05:32:36 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r0, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:36 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = eventfd2(0x1, 0x800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x1, &(0x7f0000000040), 0x1, r1, 0x8}) 05:32:36 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x28080) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x7, @pix={0x326, 0x21, 0x20303159, 0x3, 0x6, 0x0, 0x7, 0xf4f, 0x1, 0x6}}) r1 = eventfd2(0x7fe000, 0x0) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r2 = syz_open_dev$video(&(0x7f00000000c0), 0xf6b, 0x4aa180) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000240)=0x8) (async) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000040)={0x2e, 0x1}) (async) read$eventfd(r1, &(0x7f0000000100), 0x8) 05:32:36 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r0, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r0, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) 05:32:37 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffa081, 0x8) 05:32:37 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r0, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:37 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x28080) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x7, @pix={0x326, 0x21, 0x20303159, 0x3, 0x6, 0x0, 0x7, 0xf4f, 0x1, 0x6}}) r1 = eventfd2(0x7fe000, 0x0) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r2 = syz_open_dev$video(&(0x7f00000000c0), 0xf6b, 0x4aa180) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000240)=0x8) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000040)={0x2e, 0x1}) read$eventfd(r1, &(0x7f0000000100), 0x8) syz_open_dev$video(&(0x7f0000000000), 0x6, 0x28080) (async) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x7, @pix={0x326, 0x21, 0x20303159, 0x3, 0x6, 0x0, 0x7, 0xf4f, 0x1, 0x6}}) (async) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) syz_open_dev$video(&(0x7f00000000c0), 0xf6b, 0x4aa180) (async) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000240)=0x8) (async) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000040)={0x2e, 0x1}) (async) read$eventfd(r1, &(0x7f0000000100), 0x8) (async) 05:32:37 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000140)}, 0x0, 0x0]) r6 = eventfd2(0x20, 0x80001) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r8 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000001c0)={0x3, r6}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r9, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x10000, &(0x7f0000000000), 0x8, r0, 0x1}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) r3 = socket(0x2c, 0xe, 0x100) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) (async) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 05:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x24}}, 0x0) 05:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x24}}, 0x0) (async) 05:32:37 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) r2 = eventfd2(0xfffffffb, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000040)={0x2, 0x0, [0x6, 0x100, 0x2, 0x3, 0x5387, 0xfff, 0xfffff801]}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1) 05:32:37 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x4, 0x0, 0x4, 0x8000, 0x10001, 0xfff, 0x1, 0x40, 0x7, 0x101, 0x8, 0x6, 0x20, 0x645, 0x1f, 0x3ff, 0x10000, 0x1, 0x12c26096, 0x2, 0x7fff, 0x8001, 0x9, 0x6, 0x2, 0xffffffff, 0xfff, 0x2, 0x6, 0x3a4, 0x2400000, 0xd7]}) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x34ba4b593b911291) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x3}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000140)={0x1, 0x80}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)) 05:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x24}}, 0x0) (async) 05:32:37 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) r2 = eventfd2(0xfffffffb, 0x0) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000040)={0x2, 0x0, [0x6, 0x100, 0x2, 0x3, 0x5387, 0xfff, 0xfffff801]}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1) 05:32:37 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x4, 0x0, 0x4, 0x8000, 0x10001, 0xfff, 0x1, 0x40, 0x7, 0x101, 0x8, 0x6, 0x20, 0x645, 0x1f, 0x3ff, 0x10000, 0x1, 0x12c26096, 0x2, 0x7fff, 0x8001, 0x9, 0x6, 0x2, 0xffffffff, 0xfff, 0x2, 0x6, 0x3a4, 0x2400000, 0xd7]}) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x34ba4b593b911291) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x3}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000140)={0x1, 0x80}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x4, 0x0, 0x4, 0x8000, 0x10001, 0xfff, 0x1, 0x40, 0x7, 0x101, 0x8, 0x6, 0x20, 0x645, 0x1f, 0x3ff, 0x10000, 0x1, 0x12c26096, 0x2, 0x7fff, 0x8001, 0x9, 0x6, 0x2, 0xffffffff, 0xfff, 0x2, 0x6, 0x3a4, 0x2400000, 0xd7]}) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x34ba4b593b911291) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x3}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000140)={0x1, 0x80}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)) (async) 05:32:38 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x101) 05:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60420000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 05:32:38 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x4, 0x0, 0x4, 0x8000, 0x10001, 0xfff, 0x1, 0x40, 0x7, 0x101, 0x8, 0x6, 0x20, 0x645, 0x1f, 0x3ff, 0x10000, 0x1, 0x12c26096, 0x2, 0x7fff, 0x8001, 0x9, 0x6, 0x2, 0xffffffff, 0xfff, 0x2, 0x6, 0x3a4, 0x2400000, 0xd7]}) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x34ba4b593b911291) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x3}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000140)={0x1, 0x80}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)) 05:32:38 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) r2 = eventfd2(0xfffffffb, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000040)={0x2, 0x0, [0x6, 0x100, 0x2, 0x3, 0x5387, 0xfff, 0xfffff801]}) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1) 05:32:38 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000140)}, 0x0, 0x0]) r6 = eventfd2(0x20, 0x80001) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r8 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000001c0)={0x3, r6}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r9, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x10000, &(0x7f0000000000), 0x8, r0, 0x1}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) r3 = socket(0x2c, 0xe, 0x100) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 05:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60420000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 05:32:38 executing program 0: r0 = eventfd2(0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, 0xffffffffffffffff, 0x76000) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x401, 0x7fffffff, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x2, r1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x2000, &(0x7f0000000280), 0x0, 0xffffffffffffffff, 0x4}) 05:32:38 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000100), 0x8) 05:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60420000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 05:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2f5d2bd7ef20a2820bc271887e894b0492c0544adf0ca081cc14c61c0a4b9a95061ce16146c6ae5bff93c4368f9da7769b540148229bb97edee6a4cca2dca92a09d9242247cf268bd637a84ab9870ccfa0f22d803d0b4437fafb400e636b6a2d18d4c19578757eb932c1bf2c802fad420961923b83bf9d08f6c6085a9d7ee25397f3eb916daa9bb5d2ea3d3e84d73d0e4fe01e7db2220cb9864d282b1cc59a6deea766588d58232aac393e5a67dbf940bc499eb672826978252c8de30a87636ce6c6a5c1d1003a86a8df0e4b9cd091110c3905e71cd77e45296320729560cea09175ecc8a5ca5d9728467261f6eb5db9e267eae89ec4d92a2bc1c0a1a3766347c2598e5c09ff5bc3ab7c1f54a4242b8297c18fc1da0dfd6efa61997792d138bfa4a98c0ca88de8da382eb570118ab99b85366acc24f632df57a3ee39b6aa80a087d873387fd58bd03a4616e91ec746679320e8e710eed1080467cd", @ANYRES16=r1, @ANYBLOB="010301000200fdffffff0800000008003b00ff0f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20080090}, 0x4000000) 05:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010301000200fdffffff0800000008003b00ff0f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20080090}, 0x4000000) 05:32:39 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x101) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x101) (async) 05:32:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010301000200fdffffff0800000008003b00ff0f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20080090}, 0x4000000) 05:32:39 executing program 0: r0 = eventfd2(0x0, 0x0) (async) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, 0xffffffffffffffff, 0x76000) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x401, 0x7fffffff, r2}) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x2, r1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x2000, &(0x7f0000000280), 0x0, 0xffffffffffffffff, 0x4}) 05:32:39 executing program 3: eventfd2(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x333a00, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) eventfd2(0x1, 0x80801) getpgid(0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000000c0)={0x3, r1}) 05:32:39 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000140)}, 0x0, 0x0]) r6 = eventfd2(0x20, 0x80001) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r8 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000001c0)={0x3, r6}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r9, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x10000, &(0x7f0000000000), 0x8, r0, 0x1}) 05:32:39 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000100), 0x8) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) read$eventfd(r1, &(0x7f0000000100), 0x8) (async) 05:32:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:39 executing program 3: eventfd2(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x333a00, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) eventfd2(0x1, 0x80801) getpgid(0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000000c0)={0x3, r1}) 05:32:39 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x101) 05:32:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:39 executing program 3: eventfd2(0x0, 0x0) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x333a00, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) (async) eventfd2(0x1, 0x80801) (async) getpgid(0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000000c0)={0x3, r1}) 05:32:39 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) read$eventfd(r1, &(0x7f0000000100), 0x8) 05:32:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:39 executing program 0: r0 = eventfd2(0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, 0xffffffffffffffff, 0x76000) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x401, 0x7fffffff, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x2, r1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x2000, &(0x7f0000000280), 0x0, 0xffffffffffffffff, 0x4}) eventfd2(0x0, 0x0) (async) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, 0xffffffffffffffff, 0x76000) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r2, 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x401, 0x7fffffff, r2}) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x2, r1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)) (async) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000140)}, 0x0, 0x0]) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x2000, &(0x7f0000000280), 0x0, 0xffffffffffffffff, 0x4}) (async) 05:32:39 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0xffffffff, 0x18000, r0}) 05:32:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000080000020000000cd00", @ANYRES16=r3, @ANYBLOB="01032cbd7000000000000800000008003b0000000000"], 0x1c}}, 0x0) 05:32:39 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) r5 = eventfd2(0x20, 0x80001) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r7 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x3, r5}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r8, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000140)}, 0x0, 0x0]) 05:32:39 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 32) write$vga_arbiter(r2, 0x0, 0x0) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0xffffffff, 0x18000, r0}) 05:32:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000080000020000000cd00", @ANYRES16=r3, @ANYBLOB="01032cbd7000000000000800000008003b0000000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000080000020000000cd00", @ANYRES16=r3, @ANYBLOB="01032cbd7000000000000800000008003b0000000000"], 0x1c}}, 0x0) (async) 05:32:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000080000020000000cd00", @ANYRES16=r3, @ANYBLOB="01032cbd7000000000000800000008003b0000000000"], 0x1c}}, 0x0) 05:32:40 executing program 2: r0 = eventfd2(0x7fe000, 0x800) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) 05:32:40 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 64) write$vga_arbiter(r2, 0x0, 0x0) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0xffffffff, 0x18000, r0}) 05:32:40 executing program 0: r0 = eventfd2(0x1, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d86}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 05:32:40 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x2, r1}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x82}, 0x0) 05:32:40 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) r4 = eventfd2(0x20, 0x80001) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r6 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000001c0)={0x3, r4}) io_setup(0x101, &(0x7f0000000100)) 05:32:40 executing program 0: r0 = eventfd2(0x1, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d86}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 05:32:40 executing program 2: r0 = eventfd2(0x7fe000, 0x800) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) 05:32:40 executing program 3: eventfd2(0x80000000, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = eventfd2(0x0, 0x40801) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) read$fb(r2, &(0x7f0000000040)=""/185, 0xb9) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r1}) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:40 executing program 2: r0 = eventfd2(0x7fe000, 0x800) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) 05:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x82}, 0x0) 05:32:40 executing program 3: eventfd2(0x80000000, 0x0) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = eventfd2(0x0, 0x40801) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) read$fb(r2, &(0x7f0000000040)=""/185, 0xb9) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r1}) (async) write$vga_arbiter(r0, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:40 executing program 0: r0 = eventfd2(0x1, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d86}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (rerun: 64) 05:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x82}, 0x0) 05:32:40 executing program 3: eventfd2(0x80000000, 0x0) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r1 = eventfd2(0x0, 0x40801) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) read$fb(r2, &(0x7f0000000040)=""/185, 0xb9) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r1}) write$vga_arbiter(r0, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:40 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x2, r1}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0x7fe000, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x2, r1}) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) 05:32:40 executing program 2: r0 = eventfd2(0x7fe000, 0x0) eventfd2(0x7, 0x1) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffa081, 0x8) 05:32:40 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) r4 = eventfd2(0x20, 0x80001) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r6 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000001c0)={0x3, r4}) 05:32:40 executing program 3: r0 = eventfd2(0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0x100}}}, 0x14, &(0x7f0000000080)={&(0x7f0000000140)="70db8644c768a3fa5867130c10dc8ebd7bcd3e127ab533d281145a896d31fa99bacff930cfd557fbf02c97d3c2a357b83a25b2cbecf68cf5f09049a9fda1eb23f97b480aecccb9fb74d904ef4afb769f035b9e7efbfa62bfdb5c7e4cbaf4f8c92af9ba06cf3d3cb9807484ce15abdf6c4715b5078c5e98e6108f57793de9edfcfa523cc9842960846bcc1d", 0x8b}, 0x1, 0x0, 0x0, 0x800}, 0x400c004) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x2}, 0x10) 05:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)=ANY=[@ANYBLOB="6c100114", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf2500000000060001000b00000014002000fc0100000000000000000000000000010600010005000000080018007f00000114002000fc0200000000000000000000000000010500210000000000050013000400000006000e00100c0000"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) socket$l2tp6(0xa, 0x2, 0x73) socketpair(0xb, 0x3, 0x7, &(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) socketpair(0x2, 0x800, 0x40008, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="02000000e101a5879cbaa62838a9475f2b5b17058f177611e7ea", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf2501000000060001004e210000050002000a00000014000700ff010000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000010) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x1000, 0x1000, &(0x7f0000001980)=""/4096}]}) 05:32:40 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0085}, 0x8000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4810) io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000000000)="125492e116fefedfaf072977565e5120ee75ecb9993172151b444db0fdad403fc8afb36602668d5e5a66baa164f1e39660e9592b38a654aa846f18ae126a2ae17146a071f811aeb5da53a3ac83ed5c9a534119c5601e4892b1c90e59773b5f52f197d9b9c780840ded2291a646bdaadbf0ceeb2b7f4db0ed58f651e9883169129050b532a41faabb875e9cc70ac2a613b9aa4b6fd8413bcbcde6f65fe7db8792f0a6838197824b59a6b5c5027d7d30e0e4527cec2dbf", 0xb6, 0x8}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3ff, r0, &(0x7f0000000140)="7425546c13a66201a22cd353910ed36b1775836256932dfa3d289cc82fca37246cf92a15fb582bf0c52b7a38e057677a", 0x30, 0xa000000000000000}]) 05:32:40 executing program 5: r0 = eventfd2(0x7fe000, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x2, r1}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:40 executing program 3: r0 = eventfd2(0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0x100}}}, 0x14, &(0x7f0000000080)={&(0x7f0000000140)="70db8644c768a3fa5867130c10dc8ebd7bcd3e127ab533d281145a896d31fa99bacff930cfd557fbf02c97d3c2a357b83a25b2cbecf68cf5f09049a9fda1eb23f97b480aecccb9fb74d904ef4afb769f035b9e7efbfa62bfdb5c7e4cbaf4f8c92af9ba06cf3d3cb9807484ce15abdf6c4715b5078c5e98e6108f57793de9edfcfa523cc9842960846bcc1d", 0x8b}, 0x1, 0x0, 0x0, 0x800}, 0x400c004) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x2}, 0x10) eventfd2(0x0, 0x0) (async) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0x100}}}, 0x14, &(0x7f0000000080)={&(0x7f0000000140)="70db8644c768a3fa5867130c10dc8ebd7bcd3e127ab533d281145a896d31fa99bacff930cfd557fbf02c97d3c2a357b83a25b2cbecf68cf5f09049a9fda1eb23f97b480aecccb9fb74d904ef4afb769f035b9e7efbfa62bfdb5c7e4cbaf4f8c92af9ba06cf3d3cb9807484ce15abdf6c4715b5078c5e98e6108f57793de9edfcfa523cc9842960846bcc1d", 0x8b}, 0x1, 0x0, 0x0, 0x800}, 0x400c004) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x2}, 0x10) (async) 05:32:40 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x4, r0, 0x2}) 05:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)=ANY=[@ANYBLOB="6c100114", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf2500000000060001000b00000014002000fc0100000000000000000000000000010600010005000000080018007f00000114002000fc0200000000000000000000000000010500210000000000050013000400000006000e00100c0000"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socketpair(0xb, 0x3, 0x7, &(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) socketpair(0x2, 0x800, 0x40008, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="02000000e101a5879cbaa62838a9475f2b5b17058f177611e7ea", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf2501000000060001004e210000050002000a00000014000700ff010000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000010) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x1000, 0x1000, &(0x7f0000001980)=""/4096}]}) 05:32:40 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0085}, 0x8000) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4810) (async) io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000000000)="125492e116fefedfaf072977565e5120ee75ecb9993172151b444db0fdad403fc8afb36602668d5e5a66baa164f1e39660e9592b38a654aa846f18ae126a2ae17146a071f811aeb5da53a3ac83ed5c9a534119c5601e4892b1c90e59773b5f52f197d9b9c780840ded2291a646bdaadbf0ceeb2b7f4db0ed58f651e9883169129050b532a41faabb875e9cc70ac2a613b9aa4b6fd8413bcbcde6f65fe7db8792f0a6838197824b59a6b5c5027d7d30e0e4527cec2dbf", 0xb6, 0x8}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3ff, r0, &(0x7f0000000140)="7425546c13a66201a22cd353910ed36b1775836256932dfa3d289cc82fca37246cf92a15fb582bf0c52b7a38e057677a", 0x30, 0xa000000000000000}]) 05:32:40 executing program 3: r0 = eventfd2(0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0x100}}}, 0x14, &(0x7f0000000080)={&(0x7f0000000140)="70db8644c768a3fa5867130c10dc8ebd7bcd3e127ab533d281145a896d31fa99bacff930cfd557fbf02c97d3c2a357b83a25b2cbecf68cf5f09049a9fda1eb23f97b480aecccb9fb74d904ef4afb769f035b9e7efbfa62bfdb5c7e4cbaf4f8c92af9ba06cf3d3cb9807484ce15abdf6c4715b5078c5e98e6108f57793de9edfcfa523cc9842960846bcc1d", 0x8b}, 0x1, 0x0, 0x0, 0x800}, 0x400c004) (async, rerun: 64) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async, rerun: 64) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x2}, 0x10) 05:32:40 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x3f, 0x8) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r0, 0x1) 05:32:41 executing program 2: r0 = eventfd2(0x7fe000, 0x0) eventfd2(0x7, 0x1) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffa081, 0x8) eventfd2(0x7fe000, 0x0) (async) eventfd2(0x7, 0x1) (async) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffa081, 0x8) (async) 05:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)=ANY=[@ANYBLOB="6c100114", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf2500000000060001000b00000014002000fc0100000000000000000000000000010600010005000000080018007f00000114002000fc0200000000000000000000000000010500210000000000050013000400000006000e00100c0000"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) socket$l2tp6(0xa, 0x2, 0x73) (async) socketpair(0xb, 0x3, 0x7, &(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async, rerun: 64) socketpair(0x2, 0x800, 0x40008, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 64) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="02000000e101a5879cbaa62838a9475f2b5b17058f177611e7ea", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf2501000000060001004e210000050002000a00000014000700ff010000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000010) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x1000, 0x1000, &(0x7f0000001980)=""/4096}]}) 05:32:41 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0085}, 0x8000) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4810) (async) io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000000000)="125492e116fefedfaf072977565e5120ee75ecb9993172151b444db0fdad403fc8afb36602668d5e5a66baa164f1e39660e9592b38a654aa846f18ae126a2ae17146a071f811aeb5da53a3ac83ed5c9a534119c5601e4892b1c90e59773b5f52f197d9b9c780840ded2291a646bdaadbf0ceeb2b7f4db0ed58f651e9883169129050b532a41faabb875e9cc70ac2a613b9aa4b6fd8413bcbcde6f65fe7db8792f0a6838197824b59a6b5c5027d7d30e0e4527cec2dbf", 0xb6, 0x8}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3ff, r0, &(0x7f0000000140)="7425546c13a66201a22cd353910ed36b1775836256932dfa3d289cc82fca37246cf92a15fb582bf0c52b7a38e057677a", 0x30, 0xa000000000000000}]) 05:32:41 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x3f, 0x8) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r0, 0x1) eventfd2(0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x3f, 0x8) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r0, 0x1) (async) 05:32:41 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x4, r0, 0x2}) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)) (async) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x4, r0, 0x2}) (async) 05:32:41 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) eventfd2(0x20, 0x80001) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r5 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) 05:32:41 executing program 0: eventfd2(0x0, 0x0) r0 = eventfd(0x80004) r1 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:41 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x3f, 0x8) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r0, 0x1) eventfd2(0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x3f, 0x8) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r0, 0x1) (async) 05:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r2, 0x100, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffb}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x34}}, 0x0) 05:32:41 executing program 0: eventfd2(0x0, 0x0) r0 = eventfd(0x80004) (async) r1 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r2, 0x100, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffb}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x34}}, 0x0) 05:32:41 executing program 0: eventfd2(0x0, 0x0) (async) r0 = eventfd(0x80004) r1 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:42 executing program 2: r0 = eventfd2(0x7fe000, 0x0) eventfd2(0x7, 0x1) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffa081, 0x8) 05:32:42 executing program 3: r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = eventfd2(0x2, 0x80000) write$eventfd(r1, &(0x7f0000000800)=0x4, 0x8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000006c0)={0x6, 0x0, [{0x10000, 0xd6, &(0x7f0000000280)=""/214}, {0x10000, 0xda, &(0x7f0000000380)=""/218}, {0x0, 0xa4, &(0x7f0000000480)=""/164}, {0x2000, 0x45, &(0x7f0000000540)=""/69}, {0x6000, 0x2a, &(0x7f00000005c0)=""/42}, {0x5000, 0xaa, &(0x7f0000000600)=""/170}]}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000007c0)={0xffffffffffffffff, 0x7, 0x5, r1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe680}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffff02c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x8000) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x1, r1}) 05:32:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r2, 0x100, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffb}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x34}}, 0x0) 05:32:42 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r3, @ANYBLOB="010000000000090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000004}, 0x4000000) write$vga_arbiter(r1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002bbd7000fedbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000f60b00060001000000010000000c00060002000000020000000c00060002000000000000000c0006000000000002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) read$eventfd(r1, &(0x7f0000000000), 0x8) 05:32:42 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async, rerun: 64) read$eventfd(r0, &(0x7f0000000100), 0x8) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) io_setup(0x101, &(0x7f0000000100)=0x0) (rerun: 32) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x4, r0, 0x2}) 05:32:42 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) eventfd2(0x20, 0x80001) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r4 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:42 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x8, 0x200, r2}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:42 executing program 3: r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) r1 = eventfd2(0x2, 0x80000) write$eventfd(r1, &(0x7f0000000800)=0x4, 0x8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000006c0)={0x6, 0x0, [{0x10000, 0xd6, &(0x7f0000000280)=""/214}, {0x10000, 0xda, &(0x7f0000000380)=""/218}, {0x0, 0xa4, &(0x7f0000000480)=""/164}, {0x2000, 0x45, &(0x7f0000000540)=""/69}, {0x6000, 0x2a, &(0x7f00000005c0)=""/42}, {0x5000, 0xaa, &(0x7f0000000600)=""/170}]}) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000007c0)={0xffffffffffffffff, 0x7, 0x5, r1}) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe680}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffff02c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x8000) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x1, r1}) 05:32:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x78, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008004}, 0x4004041) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r7, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_DEBUG={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1000}, 0x48804) 05:32:42 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r3, @ANYBLOB="010000000000090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000004}, 0x4000000) write$vga_arbiter(r1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002bbd7000fedbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000f60b00060001000000010000000c00060002000000020000000c00060002000000000000000c0006000000000002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) (async) read$eventfd(r1, &(0x7f0000000000), 0x8) 05:32:42 executing program 3: r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = eventfd2(0x2, 0x80000) write$eventfd(r1, &(0x7f0000000800)=0x4, 0x8) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000006c0)={0x6, 0x0, [{0x10000, 0xd6, &(0x7f0000000280)=""/214}, {0x10000, 0xda, &(0x7f0000000380)=""/218}, {0x0, 0xa4, &(0x7f0000000480)=""/164}, {0x2000, 0x45, &(0x7f0000000540)=""/69}, {0x6000, 0x2a, &(0x7f00000005c0)=""/42}, {0x5000, 0xaa, &(0x7f0000000600)=""/170}]}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000007c0)={0xffffffffffffffff, 0x7, 0x5, r1}) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe680}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffff02c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x8000) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x1, r1}) 05:32:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x78, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008004}, 0x4004041) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r7, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_DEBUG={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1000}, 0x48804) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x78, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008004}, 0x4004041) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r7, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_DEBUG={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1000}, 0x48804) (async) 05:32:43 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r3, @ANYBLOB="010000000000090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000004}, 0x4000000) write$vga_arbiter(r1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002bbd7000fedbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000f60b00060001000000010000000c00060002000000020000000c00060002000000000000000c0006000000000002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) read$eventfd(r1, &(0x7f0000000000), 0x8) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r3, @ANYBLOB="010000000000090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000004}, 0x4000000) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002bbd7000fedbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000f60b00060001000000010000000c00060002000000020000000c00060002000000000000000c0006000000000002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) (async) read$eventfd(r1, &(0x7f0000000000), 0x8) (async) 05:32:43 executing program 2: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) eventfd2(0x20, 0x80001) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r4 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:43 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x8, 0x200, r2}) (async, rerun: 64) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (rerun: 64) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:43 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) eventfd2(0x20, 0x80001) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r4 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x78, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008004}, 0x4004041) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r7, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_DEBUG={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1000}, 0x48804) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x78, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008004}, 0x4004041) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r7, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_DEBUG={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1000}, 0x48804) (async) 05:32:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000440)={0x24, @short}, 0x14) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x35}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x10008000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000429bd7000fedbdf250b0000000500300000000000050029000000000005002f000100000008002c004f18000008002c00ff0f0000050035000900000008000300", @ANYRES32=r4, @ANYBLOB="08fca40049000100"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = eventfd2(0x0, 0x0) read$eventfd(r5, &(0x7f0000000100), 0x7ffffffff000) 05:32:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000440)={0x24, @short}, 0x14) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x35}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x10008000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000429bd7000fedbdf250b0000000500300000000000050029000000000005002f000100000008002c004f18000008002c00ff0f0000050035000900000008000300", @ANYRES32=r4, @ANYBLOB="08fca40049000100"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = eventfd2(0x0, 0x0) read$eventfd(r5, &(0x7f0000000100), 0x7ffffffff000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000440)={0x24, @short}, 0x14) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x810) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x35}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x10008000) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000429bd7000fedbdf250b0000000500300000000000050029000000000005002f000100000008002c004f18000008002c00ff0f0000050035000900000008000300", @ANYRES32=r4, @ANYBLOB="08fca40049000100"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) eventfd2(0x0, 0x0) (async) read$eventfd(r5, &(0x7f0000000100), 0x7ffffffff000) (async) 05:32:43 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r0, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020014}, 0x0) 05:32:43 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 05:32:43 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 05:32:43 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r0, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020014}, 0x0) 05:32:43 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async, rerun: 64) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) (rerun: 64) 05:32:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000440)={0x24, @short}, 0x14) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x810) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x35}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x10008000) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000429bd7000fedbdf250b0000000500300000000000050029000000000005002f000100000008002c004f18000008002c00ff0f0000050035000900000008000300", @ANYRES32=r4, @ANYBLOB="08fca40049000100"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) r5 = eventfd2(0x0, 0x0) read$eventfd(r5, &(0x7f0000000100), 0x7ffffffff000) 05:32:43 executing program 2: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) r4 = eventfd2(0x20, 0x80001) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r6 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000001c0)={0x3, r4}) 05:32:43 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r0, 0xffffffff, 0x800}) 05:32:44 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r1, 0x8, 0x200, r2}) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r0, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020014}, 0x0) 05:32:44 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x7ff, 0x20000) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x6a00008, 0xd0}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x3}) 05:32:44 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) eventfd2(0x20, 0x80001) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r4 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:44 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r0, 0xffffffff, 0x800}) 05:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000084) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x8011) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:44 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r0, 0xffffffff, 0x800}) 05:32:44 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x7ff, 0x20000) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x6a00008, 0xd0}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x3}) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0x0) (async) syz_open_dev$video(&(0x7f0000000040), 0x7ff, 0x20000) (async) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x6a00008, 0xd0}) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r3, 0x0, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x3}) (async) 05:32:44 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000140)}, 0x0, 0x0]) r6 = eventfd2(0x20, 0x80001) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) r8 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000240)={0x4, 0x3, @value=0xff}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000001c0)={0x3, r6}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r9, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x10000, &(0x7f0000000000), 0x8, r0, 0x1}) 05:32:44 executing program 0: eventfd2(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x21, 0x2, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0004200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x2400c000) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x1, 0x0, [0x3, 0x8000, 0x2bc, 0xffff0000, 0x20, 0x8, 0xd1, 0x8]}) 05:32:44 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140), 0x4, 0x80840) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) eventfd(0x4) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) r3 = eventfd2(0x9, 0x1800) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r2, 0x7, 0x4, r3}) r4 = syz_open_dev$video(&(0x7f0000000180), 0x80000001, 0x408001) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000000)) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000084) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x8011) (async, rerun: 64) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:44 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x7ff, 0x20000) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x6a00008, 0xd0}) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x3}) 05:32:44 executing program 0: eventfd2(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x21, 0x2, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0004200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x2400c000) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x1, 0x0, [0x3, 0x8000, 0x2bc, 0xffff0000, 0x20, 0x8, 0xd1, 0x8]}) eventfd2(0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r0, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socketpair(0x21, 0x2, 0x4, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0004200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x2400c000) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x1, 0x0, [0x3, 0x8000, 0x2bc, 0xffff0000, 0x20, 0x8, 0xd1, 0x8]}) (async) 05:32:44 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140), 0x4, 0x80840) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) eventfd(0x4) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) r3 = eventfd2(0x9, 0x1800) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r2, 0x7, 0x4, r3}) r4 = syz_open_dev$video(&(0x7f0000000180), 0x80000001, 0x408001) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000000)) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:44 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) eventfd2(0x20, 0x80001) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:44 executing program 3: socketpair(0x1d, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000100), 0x7ffffffff000) 05:32:44 executing program 0: eventfd2(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x21, 0x2, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0004200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x2400c000) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x1, 0x0, [0x3, 0x8000, 0x2bc, 0xffff0000, 0x20, 0x8, 0xd1, 0x8]}) 05:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000084) (async, rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x8011) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:44 executing program 5: r0 = eventfd2(0x7fe000, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000140), 0x4, 0x80840) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) (async) eventfd(0x4) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) r3 = eventfd2(0x9, 0x1800) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r2, 0x7, 0x4, r3}) (async) r4 = syz_open_dev$video(&(0x7f0000000180), 0x80000001, 0x408001) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000000)) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:44 executing program 2: eventfd2(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x21, 0x2, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0004200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x2400c000) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x1, 0x0, [0x3, 0x8000, 0x2bc, 0xffff0000, 0x20, 0x8, 0xd1, 0x8]}) 05:32:44 executing program 3: socketpair(0x1d, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000100), 0x7ffffffff000) 05:32:44 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0x1ff0, 0x5, r2}) 05:32:44 executing program 0: r0 = eventfd2(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xffffffffffffff8c) 05:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0018000000"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) 05:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0018000000"], 0x1c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) 05:32:44 executing program 3: socketpair(0x1d, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000100), 0x7ffffffff000) 05:32:44 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) eventfd2(0x20, 0x80001) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:44 executing program 2: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x420400, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000040)={0x25, 0x2}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) read$eventfd(r3, &(0x7f0000000100), 0x8) 05:32:44 executing program 0: r0 = eventfd2(0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xffffffffffffff8c) 05:32:44 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0x1ff0, 0x5, r2}) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r2, 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0x1ff0, 0x5, r2}) (async) 05:32:44 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x1, 0xffffffffffffffff, 0x4}) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x6) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x4) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000200)={0x2, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 05:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0018000000"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) 05:32:44 executing program 3: r0 = eventfd2(0x0, 0x0) (async) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x1, 0xffffffffffffffff, 0x4}) (async, rerun: 32) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) (async, rerun: 32) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x6) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x4) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000200)={0x2, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 05:32:44 executing program 0: r0 = eventfd2(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xffffffffffffff8c) 05:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x2b, 0x4, 0x10000, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0xd698c30b7334ba7b, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xea55}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x2, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 05:32:45 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0x1ff0, 0x5, r2}) 05:32:45 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) (async, rerun: 64) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x1, 0xffffffffffffffff, 0x4}) (async, rerun: 64) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) (async, rerun: 32) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x6) (rerun: 32) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x4) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000200)={0x2, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 05:32:45 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:45 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) eventfd2(0x20, 0x80001) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:45 executing program 2: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) eventfd2(0x20, 0x80001) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x2b, 0x4, 0x10000, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0xd698c30b7334ba7b, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xea55}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x2, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair(0x2b, 0x4, 0x10000, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0xd698c30b7334ba7b, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xea55}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x2, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) 05:32:45 executing program 3: r0 = eventfd2(0xfffffffc, 0x69c3ba329c0d3ffc) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:45 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x9, 0x2, 0x8, 0x7ff, 0x5, 0x0, 0xc68}) read$eventfd(r0, &(0x7f0000000100), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2b, 0x1, 0x7, 0x673, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x8000, 0x80, 0x80}}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) 05:32:45 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) eventfd2(0x20, 0x80001) r4 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair(0x2b, 0x4, 0x10000, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0xd698c30b7334ba7b, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xea55}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x2, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 05:32:45 executing program 3: r0 = eventfd2(0xfffffffc, 0x69c3ba329c0d3ffc) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:45 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x9, 0x2, 0x8, 0x7ff, 0x5, 0x0, 0xc68}) read$eventfd(r0, &(0x7f0000000100), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2b, 0x1, 0x7, 0x673, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x8000, 0x80, 0x80}}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x9, 0x2, 0x8, 0x7ff, 0x5, 0x0, 0xc68}) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2b, 0x1, 0x7, 0x673, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x8000, 0x80, 0x80}}) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) 05:32:45 executing program 3: r0 = eventfd2(0xfffffffc, 0x69c3ba329c0d3ffc) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) eventfd2(0xfffffffc, 0x69c3ba329c0d3ffc) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) 05:32:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x10, 0x3, 0xfff, &(0x7f0000000080)) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x948}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040100}, 0x40) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000545900165088229dbcf9a4baf6230539203ef453dfe1fddbaea5b0170bc870f479897e68de0e926be138563f811b6256e8d656a41c2ff13c16440978cda21b4f93865a773d09770f569eb9ce947db89a5f2cb30021f3a29c6845256b46fdeadfa950aea765dcf2946c69301cc92fc6011f1e0ddca27525c255b002663c03af963256d588bea6523080930df2cb552120702eb8a1d9be6e1ad3bb34b6d072770506128fa0f1a3676b588bb3b58494e1765dbfc08e94278e78f451b7892dbbe5e5b1b4b01441142b69b87413e80c9354ed4057df34de9c91334f924c56ff7087abc8d6973c887aae8963ecc63eb1aa446f57b7", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000008003b0000000000339fb86aeecefe5da32c4493e4237dfef9eda6086a3f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 05:32:45 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x5, @win={{0x6, 0x7, 0x3, 0x4}, 0x0, 0x80000001, &(0x7f0000000100)={{0x6, 0x3f, 0x7, 0x1f}, &(0x7f00000000c0)={{0x1, 0xc9a6, 0x8, 0xfffffff8}, &(0x7f0000000080)={{0xb5d, 0x7, 0x8}}}}, 0x3854, &(0x7f0000000140)="8a77fed8b3dcab95a54a7f27e2d4107d6b2f2c579a2d82d43f17e8545139fc9e0741285ab1ff29b9c49dc6bad52e51fc61", 0x88}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) eventfd2(0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 05:32:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x5, @win={{0x6, 0x7, 0x3, 0x4}, 0x0, 0x80000001, &(0x7f0000000100)={{0x6, 0x3f, 0x7, 0x1f}, &(0x7f00000000c0)={{0x1, 0xc9a6, 0x8, 0xfffffff8}, &(0x7f0000000080)={{0xb5d, 0x7, 0x8}}}}, 0x3854, &(0x7f0000000140)="8a77fed8b3dcab95a54a7f27e2d4107d6b2f2c579a2d82d43f17e8545139fc9e0741285ab1ff29b9c49dc6bad52e51fc61", 0x88}}) (async, rerun: 64) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000680)) (async, rerun: 64) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) (async) eventfd2(0x0, 0x0) (async, rerun: 64) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 64) write$vga_arbiter(r1, 0x0, 0x0) (async, rerun: 64) read$eventfd(r1, &(0x7f0000000000), 0x8) (rerun: 64) 05:32:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x10, 0x3, 0xfff, &(0x7f0000000080)) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x948}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040100}, 0x40) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000545900165088229dbcf9a4baf6230539203ef453dfe1fddbaea5b0170bc870f479897e68de0e926be138563f811b6256e8d656a41c2ff13c16440978cda21b4f93865a773d09770f569eb9ce947db89a5f2cb30021f3a29c6845256b46fdeadfa950aea765dcf2946c69301cc92fc6011f1e0ddca27525c255b002663c03af963256d588bea6523080930df2cb552120702eb8a1d9be6e1ad3bb34b6d072770506128fa0f1a3676b588bb3b58494e1765dbfc08e94278e78f451b7892dbbe5e5b1b4b01441142b69b87413e80c9354ed4057df34de9c91334f924c56ff7087abc8d6973c887aae8963ecc63eb1aa446f57b7", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000008003b0000000000339fb86aeecefe5da32c4493e4237dfef9eda6086a3f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 05:32:46 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x9, 0x2, 0x8, 0x7ff, 0x5, 0x0, 0xc68}) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2b, 0x1, 0x7, 0x673, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x8000, 0x80, 0x80}}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) 05:32:46 executing program 2: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) eventfd2(0x20, 0x80001) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x8a240, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:46 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) r4 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x5, @win={{0x6, 0x7, 0x3, 0x4}, 0x0, 0x80000001, &(0x7f0000000100)={{0x6, 0x3f, 0x7, 0x1f}, &(0x7f00000000c0)={{0x1, 0xc9a6, 0x8, 0xfffffff8}, &(0x7f0000000080)={{0xb5d, 0x7, 0x8}}}}, 0x3854, &(0x7f0000000140)="8a77fed8b3dcab95a54a7f27e2d4107d6b2f2c579a2d82d43f17e8545139fc9e0741285ab1ff29b9c49dc6bad52e51fc61", 0x88}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) (async) eventfd2(0x0, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) read$eventfd(r1, &(0x7f0000000000), 0x8) 05:32:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x10, 0x3, 0xfff, &(0x7f0000000080)) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x948}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040100}, 0x40) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000545900165088229dbcf9a4baf6230539203ef453dfe1fddbaea5b0170bc870f479897e68de0e926be138563f811b6256e8d656a41c2ff13c16440978cda21b4f93865a773d09770f569eb9ce947db89a5f2cb30021f3a29c6845256b46fdeadfa950aea765dcf2946c69301cc92fc6011f1e0ddca27525c255b002663c03af963256d588bea6523080930df2cb552120702eb8a1d9be6e1ad3bb34b6d072770506128fa0f1a3676b588bb3b58494e1765dbfc08e94278e78f451b7892dbbe5e5b1b4b01441142b69b87413e80c9354ed4057df34de9c91334f924c56ff7087abc8d6973c887aae8963ecc63eb1aa446f57b7", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000008003b0000000000339fb86aeecefe5da32c4493e4237dfef9eda6086a3f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair(0x10, 0x3, 0xfff, &(0x7f0000000080)) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x948}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040100}, 0x40) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000545900165088229dbcf9a4baf6230539203ef453dfe1fddbaea5b0170bc870f479897e68de0e926be138563f811b6256e8d656a41c2ff13c16440978cda21b4f93865a773d09770f569eb9ce947db89a5f2cb30021f3a29c6845256b46fdeadfa950aea765dcf2946c69301cc92fc6011f1e0ddca27525c255b002663c03af963256d588bea6523080930df2cb552120702eb8a1d9be6e1ad3bb34b6d072770506128fa0f1a3676b588bb3b58494e1765dbfc08e94278e78f451b7892dbbe5e5b1b4b01441142b69b87413e80c9354ed4057df34de9c91334f924c56ff7087abc8d6973c887aae8963ecc63eb1aa446f57b7", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000008003b0000000000339fb86aeecefe5da32c4493e4237dfef9eda6086a3f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) 05:32:46 executing program 5: r0 = eventfd2(0x7fe000, 0x3) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = eventfd2(0x1, 0x1) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000040)=0xa8) write$eventfd(r1, &(0x7f0000000000)=0x583000000, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:46 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x7ff, {0x6, 0x1, 0x80000000, 0x80000000, 0xe06, 0x603d}}) r0 = eventfd2(0x7, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x470102, 0x0) 05:32:46 executing program 5: r0 = eventfd2(0x7fe000, 0x3) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) r1 = eventfd2(0x1, 0x1) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000040)=0xa8) (async) write$eventfd(r1, &(0x7f0000000000)=0x583000000, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:46 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x100, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}}, 0x0) 05:32:46 executing program 5: r0 = eventfd2(0x7fe000, 0x3) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = eventfd2(0x1, 0x1) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000040)=0xa8) write$eventfd(r1, &(0x7f0000000000)=0x583000000, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:46 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x7ff, {0x6, 0x1, 0x80000000, 0x80000000, 0xe06, 0x603d}}) r0 = eventfd2(0x7, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x470102, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x7ff, {0x6, 0x1, 0x80000000, 0x80000000, 0xe06, 0x603d}}) (async) eventfd2(0x7, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x470102, 0x0) (async) 05:32:46 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)) r2 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:46 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = eventfd(0xfff) read$eventfd(r1, &(0x7f0000000000), 0x8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x3, r0}) 05:32:46 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x9, 0x40, 0x3, {0x7, @raw_data="12799b8e42d2ff92bea426b222e79e37b1b98cd8cb60f9d74adf0df3640854d0ef8b58e9104ecdf97e87c626c71a4396631747b54c3f2639f99958d493a41cb1fa87467a07a31d2fd7d7607f3cfa328def9e2d433834dcb566bb9ac5f8b81cf1418e554db2b6284ef1f52a24484673b8991971ddc62997577d6233cb9fbc8df0ab16b7d5081939ffdaf887f168907f188f59e6a89580cca49d9e21fbadb5625a11b9586ded2d6a7827981cca056269222f32e986997da2c4e840c149ffcac0fe6372d94eb7e5bb53"}, 0x1}) r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:46 executing program 2: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) io_setup(0x8, &(0x7f00000017c0)) 05:32:46 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x7ff, {0x6, 0x1, 0x80000000, 0x80000000, 0xe06, 0x603d}}) r0 = eventfd2(0x7, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x470102, 0x0) 05:32:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x100, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}}, 0x0) 05:32:46 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) 05:32:47 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) (async) 05:32:47 executing program 0: r0 = eventfd2(0x0, 0x80801) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x3, r0}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x6}) 05:32:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x100, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}}, 0x0) 05:32:47 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x9, 0x40, 0x3, {0x7, @raw_data="12799b8e42d2ff92bea426b222e79e37b1b98cd8cb60f9d74adf0df3640854d0ef8b58e9104ecdf97e87c626c71a4396631747b54c3f2639f99958d493a41cb1fa87467a07a31d2fd7d7607f3cfa328def9e2d433834dcb566bb9ac5f8b81cf1418e554db2b6284ef1f52a24484673b8991971ddc62997577d6233cb9fbc8df0ab16b7d5081939ffdaf887f168907f188f59e6a89580cca49d9e21fbadb5625a11b9586ded2d6a7827981cca056269222f32e986997da2c4e840c149ffcac0fe6372d94eb7e5bb53"}, 0x1}) r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x9, 0x40, 0x3, {0x7, @raw_data="12799b8e42d2ff92bea426b222e79e37b1b98cd8cb60f9d74adf0df3640854d0ef8b58e9104ecdf97e87c626c71a4396631747b54c3f2639f99958d493a41cb1fa87467a07a31d2fd7d7607f3cfa328def9e2d433834dcb566bb9ac5f8b81cf1418e554db2b6284ef1f52a24484673b8991971ddc62997577d6233cb9fbc8df0ab16b7d5081939ffdaf887f168907f188f59e6a89580cca49d9e21fbadb5625a11b9586ded2d6a7827981cca056269222f32e986997da2c4e840c149ffcac0fe6372d94eb7e5bb53"}, 0x1}) (async) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) 05:32:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x100, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}}, 0x0) 05:32:47 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) 05:32:47 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:47 executing program 3: r0 = eventfd2(0x1, 0x100000) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:47 executing program 2: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)) r2 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:47 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x9, 0x40, 0x3, {0x7, @raw_data="12799b8e42d2ff92bea426b222e79e37b1b98cd8cb60f9d74adf0df3640854d0ef8b58e9104ecdf97e87c626c71a4396631747b54c3f2639f99958d493a41cb1fa87467a07a31d2fd7d7607f3cfa328def9e2d433834dcb566bb9ac5f8b81cf1418e554db2b6284ef1f52a24484673b8991971ddc62997577d6233cb9fbc8df0ab16b7d5081939ffdaf887f168907f188f59e6a89580cca49d9e21fbadb5625a11b9586ded2d6a7827981cca056269222f32e986997da2c4e840c149ffcac0fe6372d94eb7e5bb53"}, 0x1}) (async) r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x24040811) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r7, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2404c850}, 0x4) 05:32:47 executing program 0: r0 = eventfd2(0x0, 0x80801) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x3, r0}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x6}) eventfd2(0x0, 0x80801) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x3, r0}) (async) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x6}) (async) 05:32:47 executing program 0: r0 = eventfd2(0x0, 0x80801) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (rerun: 32) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x3, r0}) (async) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, 0x0) (async, rerun: 32) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x6}) (rerun: 32) 05:32:47 executing program 3: r0 = eventfd2(0x1, 0x100000) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x24040811) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r6) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r7, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2404c850}, 0x4) 05:32:48 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0xffffff83) eventfd2(0x1, 0x80001) 05:32:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x24040811) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r6) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r7, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2404c850}, 0x4) 05:32:48 executing program 3: r0 = eventfd2(0x1, 0x100000) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:48 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:48 executing program 3: eventfd2(0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x24}}, 0x46f9ccf13a105270) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x4, 0x3, 0x1}) r0 = eventfd(0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:48 executing program 2: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:48 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0xffffff83) (async) eventfd2(0x1, 0x80001) 05:32:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:48 executing program 3: eventfd2(0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x24}}, 0x46f9ccf13a105270) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x4, 0x3, 0x1}) (async) r0 = eventfd(0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:48 executing program 0: r0 = eventfd2(0x0, 0x81000) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd290}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x2, r0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r6, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f0000000140)}, 0x0, 0x0]) r7 = eventfd(0x1) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000040)={0x1, r7}) 05:32:48 executing program 1: eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:48 executing program 3: eventfd2(0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x24}}, 0x46f9ccf13a105270) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x4, 0x3, 0x1}) (async) r0 = eventfd(0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}]}, 0x30}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) 05:32:48 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0xffffff83) (async) eventfd2(0x1, 0x80001) 05:32:48 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0xfffff801, 0x99, r2}) 05:32:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}]}, 0x30}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:48 executing program 1: eventfd2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909db, 0xfff, '\x00', @value=0x9}}) r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:48 executing program 2: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) io_setup(0x8, &(0x7f00000017c0)) 05:32:48 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) eventfd(0x3) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:48 executing program 0: r0 = eventfd2(0x0, 0x81000) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd290}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x2, r0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r6, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f0000000140)}, 0x0, 0x0]) r7 = eventfd(0x1) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000040)={0x1, r7}) 05:32:48 executing program 1: eventfd2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000850}, 0x20800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000050) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc3d332ff6fcbc2fc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) 05:32:48 executing program 1: eventfd2(0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000850}, 0x20800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000050) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc3d332ff6fcbc2fc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) 05:32:48 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) eventfd(0x3) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) eventfd(0x3) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) 05:32:48 executing program 2: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) eventfd2(0x7, 0x80001) io_setup(0x8, &(0x7f00000017c0)) 05:32:49 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0xfffff801, 0x99, r2}) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r2, 0x0, 0x0) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0xfffff801, 0x99, r2}) (async) 05:32:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000850}, 0x20800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000050) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc3d332ff6fcbc2fc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000850}, 0x20800) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000050) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc3d332ff6fcbc2fc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) (async) 05:32:49 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:49 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) eventfd(0x3) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) eventfd(0x3) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) 05:32:49 executing program 2: eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) eventfd2(0x7, 0x80001) socketpair(0xa, 0x5, 0x0, &(0x7f0000000280)) socket(0x28, 0x6, 0x7f) io_setup(0x8, &(0x7f00000017c0)) 05:32:49 executing program 0: r0 = eventfd2(0x0, 0x81000) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd290}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x2, r0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r6, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f0000000140)}, 0x0, 0x0]) (async) r7 = eventfd(0x1) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000040)={0x1, r7}) 05:32:49 executing program 1: r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0xfffffffffffffdc3}}, 0x0) 05:32:49 executing program 1: r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:49 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0xfffff801, 0x99, r2}) 05:32:49 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffff8, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="09eeb16bf7f1d67d00000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:49 executing program 1: r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0xfffffffffffffdc3}}, 0x0) 05:32:49 executing program 2: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:49 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:49 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) socket$bt_bnep(0x1f, 0x3, 0x4) 05:32:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0xfffffffffffffdc3}}, 0x0) 05:32:49 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffff8, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:49 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:49 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) socket$bt_bnep(0x1f, 0x3, 0x4) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) 05:32:50 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_setup(0x400568, &(0x7f00000001c0)=0x0) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x10000, r0}) io_setup(0x5, &(0x7f0000000140)=0x0) io_destroy(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 05:32:50 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004301b55b43a4c88f7a8e3f9cd9d52770009b2872ab916e57d17e1f350d4672197f387291af36d30d1ad4c74b5329444f6cd0bff8d1cca1467ef83255b189c045abd15ce75f502296bf9d6530ffafbbdcc79383f09c9460ebfa6bced4badfa2c89a024e2fceaded35483d2de6272622e084cbdddef69c8bb57c075d101e47951cd4e1d6e91696ac150fd03f76ab44ba134d28539f0ed90617d7f86390e978a98a04268dcb293cb80bf67cf9a6e5217a526114f6573214772e96a1a2fb55f478c5a7c98274a9c11bf9830000000000000000", @ANYRES32=r0, @ANYRESOCT=r1], 0x1c}}, 0x0) 05:32:50 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) socket$bt_bnep(0x1f, 0x3, 0x4) 05:32:50 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:50 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffff8, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffff8, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) 05:32:50 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004301b55b43a4c88f7a8e3f9cd9d52770009b2872ab916e57d17e1f350d4672197f387291af36d30d1ad4c74b5329444f6cd0bff8d1cca1467ef83255b189c045abd15ce75f502296bf9d6530ffafbbdcc79383f09c9460ebfa6bced4badfa2c89a024e2fceaded35483d2de6272622e084cbdddef69c8bb57c075d101e47951cd4e1d6e91696ac150fd03f76ab44ba134d28539f0ed90617d7f86390e978a98a04268dcb293cb80bf67cf9a6e5217a526114f6573214772e96a1a2fb55f478c5a7c98274a9c11bf9830000000000000000", @ANYRES32=r0, @ANYRESOCT=r1], 0x1c}}, 0x0) 05:32:50 executing program 0: r0 = eventfd2(0x3f, 0x800) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x1, r0, 0xfffffffd}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:50 executing program 1: syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:50 executing program 0: r0 = eventfd2(0x3f, 0x800) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x1, r0, 0xfffffffd}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) read$eventfd(r0, &(0x7f0000000000), 0x8) eventfd2(0x3f, 0x800) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x1, r0, 0xfffffffd}) (async) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000080)) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) 05:32:50 executing program 5: r0 = eventfd2(0x7fe003, 0x40801) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:50 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) io_setup(0x400568, &(0x7f00000001c0)=0x0) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) (async) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x10000, r0}) io_setup(0x5, &(0x7f0000000140)=0x0) io_destroy(r5) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) 05:32:50 executing program 1: syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:50 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:50 executing program 5: r0 = eventfd2(0x7fe003, 0x40801) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0x7fe003, 0x40801) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) 05:32:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004301b55b43a4c88f7a8e3f9cd9d52770009b2872ab916e57d17e1f350d4672197f387291af36d30d1ad4c74b5329444f6cd0bff8d1cca1467ef83255b189c045abd15ce75f502296bf9d6530ffafbbdcc79383f09c9460ebfa6bced4badfa2c89a024e2fceaded35483d2de6272622e084cbdddef69c8bb57c075d101e47951cd4e1d6e91696ac150fd03f76ab44ba134d28539f0ed90617d7f86390e978a98a04268dcb293cb80bf67cf9a6e5217a526114f6573214772e96a1a2fb55f478c5a7c98274a9c11bf9830000000000000000", @ANYRES32=r0, @ANYRESOCT=r1], 0x1c}}, 0x0) 05:32:50 executing program 0: r0 = eventfd2(0x3f, 0x800) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x1, r0, 0xfffffffd}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:50 executing program 5: r0 = eventfd2(0x7fe003, 0x40801) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0x7fe003, 0x40801) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) 05:32:50 executing program 2: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) 05:32:50 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004095}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000048b8af67fb2afde478bc0b311412e5e3b3a31c", @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:50 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) socketpair(0x0, 0x800, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x80400) r2 = eventfd(0x1) read$eventfd(r2, &(0x7f0000000000), 0x8) 05:32:50 executing program 1: syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000280)={0x2, {0x8, 0x8, 0x800, 0x2f}}) 05:32:50 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x100000, &(0x7f0000000040), 0x2, r0, 0x8}) read$eventfd(r0, &(0x7f0000000100), 0x8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000001c0)={0x0, 0xc3}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000000)={0x2}) 05:32:50 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) io_setup(0x400568, &(0x7f00000001c0)=0x0) (rerun: 64) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x10000, r0}) (async, rerun: 32) io_setup(0x5, &(0x7f0000000140)=0x0) (rerun: 32) io_destroy(r5) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 05:32:50 executing program 2: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) 05:32:50 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, 0x0) 05:32:50 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004095}, 0x4000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000048b8af67fb2afde478bc0b311412e5e3b3a31c", @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:50 executing program 2: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) 05:32:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, 0x0) 05:32:51 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) socketpair(0x0, 0x800, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x80400) (async, rerun: 64) r2 = eventfd(0x1) (rerun: 64) read$eventfd(r2, &(0x7f0000000000), 0x8) 05:32:51 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004095}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000048b8af67fb2afde478bc0b311412e5e3b3a31c", @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004095}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000048b8af67fb2afde478bc0b311412e5e3b3a31c", @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) (async) 05:32:51 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9cdb}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000814}, 0x40010) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xd81d}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x35}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c08c}, 0x40008) 05:32:51 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, 0x0) 05:32:51 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9cdb}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000814}, 0x40010) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xd81d}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x35}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c08c}, 0x40008) eventfd2(0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9cdb}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000814}, 0x40010) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xd81d}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x35}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c08c}, 0x40008) (async) 05:32:51 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x100000, &(0x7f0000000040), 0x2, r0, 0x8}) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000001c0)={0x0, 0xc3}) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000000)={0x2}) 05:32:51 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x0, {0x8, 0x8, 0x800, 0x2f}}) 05:32:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xe49a}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x4008050) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xe49a}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x4008050) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:51 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:51 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) socketpair(0x0, 0x800, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x80400) r2 = eventfd(0x1) read$eventfd(r2, &(0x7f0000000000), 0x8) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) write$vga_arbiter(r0, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) socketpair(0x0, 0x800, 0x2, &(0x7f0000000080)) (async) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x80400) (async) eventfd(0x1) (async) read$eventfd(r2, &(0x7f0000000000), 0x8) (async) 05:32:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x0, {0x8, 0x8, 0x800, 0x2f}}) 05:32:51 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9cdb}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000814}, 0x40010) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xd81d}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x35}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c08c}, 0x40008) eventfd2(0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9cdb}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000814}, 0x40010) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xd81d}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x35}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c08c}, 0x40008) (async) 05:32:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x0, {0x8, 0x8, 0x800, 0x2f}}) 05:32:51 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x8, 0x800, 0x2f}}) 05:32:51 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:51 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x100000, &(0x7f0000000040), 0x2, r0, 0x8}) read$eventfd(r0, &(0x7f0000000100), 0x8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000001c0)={0x0, 0xc3}) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000000)={0x2}) 05:32:51 executing program 0: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x3, 0x8) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:51 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x903}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5c}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) eventfd2(0xfffffffd, 0x1) 05:32:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x800, 0x2f}}) 05:32:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xe49a}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x4008050) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:51 executing program 0: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x3, 0x8) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x0, 0x0) (async) write$eventfd(r0, &(0x7f0000000000)=0x3, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) 05:32:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0x2f}}) 05:32:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0xc000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf251000000008003c000300000005002a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x200428c0}, 0x800) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000cecbed1c464b91ae518893d05c8312"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4c081) 05:32:51 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:51 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x903}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5c}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) eventfd2(0xfffffffd, 0x1) 05:32:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0xc000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf251000000008003c000300000005002a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x200428c0}, 0x800) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000cecbed1c464b91ae518893d05c8312"], 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4c081) 05:32:51 executing program 0: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x3, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:51 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x3, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) 05:32:51 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x903}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5c}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) eventfd2(0xfffffffd, 0x1) 05:32:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2}) 05:32:51 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0xc000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf251000000008003c000300000005002a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x200428c0}, 0x800) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000cecbed1c464b91ae518893d05c8312"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4c081) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0xc000, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf251000000008003c000300000005002a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x200428c0}, 0x800) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000cecbed1c464b91ae518893d05c8312"], 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4c081) (async) 05:32:51 executing program 0: r0 = eventfd2(0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x1, r0}) gettid() read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:51 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:51 executing program 1: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_setup(0x400568, &(0x7f00000001c0)=0x0) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x10000, r0}) io_setup(0x5, &(0x7f0000000140)=0x0) io_destroy(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 05:32:51 executing program 0: r0 = eventfd2(0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x1, r0}) (async) gettid() (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:51 executing program 3: ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x6, 0x3, 0x400, 0x1}}) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:51 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x3, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) 05:32:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000080), 0x8, 0x200800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000c08ca859aa97748b07dc9c1a2cce797487b9ed79a42838dd0b4df184341820e713e8a9e1e92480a8497bc339be3d0cc20f7a99b3413c23470ed21c26bd4956ea1f839d28d3b2a533478c02268e69a5076fd1ceb8281df260f407e2a3eff133faf8ace13fb54fe5847642fc472802a676ff306ac60e7213a7257dd49b6c3fa840113a1f50fa9b6f8c", @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011003b0000000000f7295b6fa1e8a51c214cded21f1d3ebac0ddd2aa21264b654309d350fba63228f50a9cec1157dc5af968412e3a1adfb4defbd37ff7d5e537e11c857cd308050980911b9e58dcde25672fe9ce8656ec3b8d028a72c8562d9a8a43328fe0a7625ebf31b079b4d13ed06d0aea3cdac43360454670fa82075382d9b760adc6c2cd09c8d3b8e5cc83a1c9880b8f94146548d2b8f0701ef26f630bc78dbb71823dd7f7526b3d90fa6630054315c4a516093c6dc86a931114a720d004c2ac024c7ee77a7acf98d8397285b33c21b933920d1a23fe52ffa89d7dc9e8a276be94"], 0x1c}}, 0x0) 05:32:52 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:52 executing program 3: ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x6, 0x3, 0x400, 0x1}}) (async, rerun: 64) r0 = eventfd2(0x0, 0x0) (rerun: 64) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:52 executing program 0: r0 = eventfd2(0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x1, r0}) (async) gettid() read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:52 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x3, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000040)=0x3, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) (async) 05:32:52 executing program 0: r0 = eventfd2(0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xa984}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3d}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}]}, 0x2c}}, 0x48000) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000140)={0x69f}) 05:32:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000080), 0x8, 0x200800) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000c08ca859aa97748b07dc9c1a2cce797487b9ed79a42838dd0b4df184341820e713e8a9e1e92480a8497bc339be3d0cc20f7a99b3413c23470ed21c26bd4956ea1f839d28d3b2a533478c02268e69a5076fd1ceb8281df260f407e2a3eff133faf8ace13fb54fe5847642fc472802a676ff306ac60e7213a7257dd49b6c3fa840113a1f50fa9b6f8c", @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011003b0000000000f7295b6fa1e8a51c214cded21f1d3ebac0ddd2aa21264b654309d350fba63228f50a9cec1157dc5af968412e3a1adfb4defbd37ff7d5e537e11c857cd308050980911b9e58dcde25672fe9ce8656ec3b8d028a72c8562d9a8a43328fe0a7625ebf31b079b4d13ed06d0aea3cdac43360454670fa82075382d9b760adc6c2cd09c8d3b8e5cc83a1c9880b8f94146548d2b8f0701ef26f630bc78dbb71823dd7f7526b3d90fa6630054315c4a516093c6dc86a931114a720d004c2ac024c7ee77a7acf98d8397285b33c21b933920d1a23fe52ffa89d7dc9e8a276be94"], 0x1c}}, 0x0) 05:32:52 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000000)={0xd983, "a29824def8e06b6a1933716bbe51d17a385844f25f904134f9fce7270c616a70"}) 05:32:52 executing program 1: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_setup(0x400568, &(0x7f00000001c0)=0x0) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x10000, r0}) io_setup(0x5, &(0x7f0000000140)=0x0) io_destroy(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 05:32:52 executing program 2: r0 = eventfd2(0x0, 0x800) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:52 executing program 3: ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x6, 0x3, 0x400, 0x1}}) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x6, 0x3, 0x400, 0x1}}) (async) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) 05:32:52 executing program 0: r0 = eventfd2(0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xa984}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3d}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}]}, 0x2c}}, 0x48000) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000140)={0x69f}) 05:32:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$video(&(0x7f0000000080), 0x8, 0x200800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000c08ca859aa97748b07dc9c1a2cce797487b9ed79a42838dd0b4df184341820e713e8a9e1e92480a8497bc339be3d0cc20f7a99b3413c23470ed21c26bd4956ea1f839d28d3b2a533478c02268e69a5076fd1ceb8281df260f407e2a3eff133faf8ace13fb54fe5847642fc472802a676ff306ac60e7213a7257dd49b6c3fa840113a1f50fa9b6f8c", @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011003b0000000000f7295b6fa1e8a51c214cded21f1d3ebac0ddd2aa21264b654309d350fba63228f50a9cec1157dc5af968412e3a1adfb4defbd37ff7d5e537e11c857cd308050980911b9e58dcde25672fe9ce8656ec3b8d028a72c8562d9a8a43328fe0a7625ebf31b079b4d13ed06d0aea3cdac43360454670fa82075382d9b760adc6c2cd09c8d3b8e5cc83a1c9880b8f94146548d2b8f0701ef26f630bc78dbb71823dd7f7526b3d90fa6630054315c4a516093c6dc86a931114a720d004c2ac024c7ee77a7acf98d8397285b33c21b933920d1a23fe52ffa89d7dc9e8a276be94"], 0x1c}}, 0x0) 05:32:52 executing program 3: eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 05:32:52 executing program 2: r0 = eventfd2(0x0, 0x800) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:52 executing program 0: r0 = eventfd2(0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xa984}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3d}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}]}, 0x2c}}, 0x48000) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000140)={0x69f}) 05:32:52 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000000)={0xd983, "a29824def8e06b6a1933716bbe51d17a385844f25f904134f9fce7270c616a70"}) 05:32:52 executing program 2: r0 = eventfd2(0x0, 0x800) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:52 executing program 3: eventfd2(0x0, 0x0) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 05:32:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x289}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffb7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000821}, 0x24008080) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x40030000000000) 05:32:52 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async, rerun: 64) read$eventfd(r0, &(0x7f0000000100), 0x8) (async, rerun: 64) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000000)={0xd983, "a29824def8e06b6a1933716bbe51d17a385844f25f904134f9fce7270c616a70"}) 05:32:52 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:52 executing program 0: eventfd2(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:52 executing program 3: eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) eventfd2(0x0, 0x0) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) 05:32:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x289}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffb7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000821}, 0x24008080) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:52 executing program 3: socket$rds(0x15, 0x5, 0x0) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:52 executing program 0: eventfd2(0x0, 0x0) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:52 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:52 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)) r1 = eventfd2(0x7fe002, 0x80800) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r1, &(0x7f0000000100), 0x8) 05:32:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x289}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffb7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000821}, 0x24008080) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x44000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x289}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffb7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000821}, 0x24008080) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) 05:32:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0xffffff7f) 05:32:52 executing program 3: socket$rds(0x15, 0x5, 0x0) (async) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:52 executing program 0: eventfd2(0x0, 0x0) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:52 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:52 executing program 1: r0 = eventfd2(0x7fe000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x241f1298}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000240)={0x1, 'wlan1\x00', {}, 0x400}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ca9a9e8d22aef0ceefe88e2ea0299b060c6a2a7c147b559f25cd94082a86cd05a50dac56f96b91c980c2775a399dfb4d8043a3c971d83c803211640ef80e673013c6cd9fd2794e81f5f9366422449b4f2abb41b86fc0ac383efef9284b027ce9e508474e39792ccce5652e6ca65f8eec17e39f88e5d2ed08426bb09468cd49718a46b66898f23667baaf0a33238427c9f2a08d0dba73c1fa77e93406a12ee289a8ece5969599f2e2f04ed6eb64a4f1eaaac6e95f8d3124fd9bc0fc71868fdc8309682bcd434029242bf8010f311ba45680e2a43f1a91ee5bb77a8ddf09fb8eb9b17cefff400000000000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:52 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)) r1 = eventfd2(0x7fe002, 0x80800) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async, rerun: 32) read$eventfd(r1, &(0x7f0000000100), 0x8) (rerun: 32) 05:32:52 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0xb, 0x6, {0x54, 0x0, 0x2, {0x1, 0x80}, {0xff, 0xc0e8}, @const={0x41, {0x1, 0x9, 0x6, 0x9}}}, {0x53, 0x1, 0x5, {0x1, 0xfffc}, {0x6}, @period={0x5d, 0x101, 0x1bd0, 0xf078, 0x8, {0x0, 0x8, 0x8, 0x1}, 0x1, &(0x7f0000000000)=[0x8]}}}) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) 05:32:52 executing program 3: socket$rds(0x15, 0x5, 0x0) (async) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:52 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:52 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)) (async) r1 = eventfd2(0x7fe002, 0x80800) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r1, &(0x7f0000000100), 0x8) 05:32:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ca9a9e8d22aef0ceefe88e2ea0299b060c6a2a7c147b559f25cd94082a86cd05a50dac56f96b91c980c2775a399dfb4d8043a3c971d83c803211640ef80e673013c6cd9fd2794e81f5f9366422449b4f2abb41b86fc0ac383efef9284b027ce9e508474e39792ccce5652e6ca65f8eec17e39f88e5d2ed08426bb09468cd49718a46b66898f23667baaf0a33238427c9f2a08d0dba73c1fa77e93406a12ee289a8ece5969599f2e2f04ed6eb64a4f1eaaac6e95f8d3124fd9bc0fc71868fdc8309682bcd434029242bf8010f311ba45680e2a43f1a91ee5bb77a8ddf09fb8eb9b17cefff400000000000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ca9a9e8d22aef0ceefe88e2ea0299b060c6a2a7c147b559f25cd94082a86cd05a50dac56f96b91c980c2775a399dfb4d8043a3c971d83c803211640ef80e673013c6cd9fd2794e81f5f9366422449b4f2abb41b86fc0ac383efef9284b027ce9e508474e39792ccce5652e6ca65f8eec17e39f88e5d2ed08426bb09468cd49718a46b66898f23667baaf0a33238427c9f2a08d0dba73c1fa77e93406a12ee289a8ece5969599f2e2f04ed6eb64a4f1eaaac6e95f8d3124fd9bc0fc71868fdc8309682bcd434029242bf8010f311ba45680e2a43f1a91ee5bb77a8ddf09fb8eb9b17cefff400000000000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) (async) 05:32:52 executing program 1: ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)=@userptr={0x3, 0x6, 0x4, 0x70000, 0x80000000, {0x0, 0xea60}, {0x4, 0x2, 0x54, 0x6, 0x65, 0x3, "07a06a52"}, 0x7, 0x2, {&(0x7f00000001c0)}, 0x10001}) r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x2}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0xfd, &(0x7f0000000140)=0x0) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)}, 0x0, 0x0]) r4 = eventfd(0xfff) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x100000, &(0x7f0000000000), 0x1, r4, 0xa}) 05:32:52 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:52 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0xb, 0x6, {0x54, 0x0, 0x2, {0x1, 0x80}, {0xff, 0xc0e8}, @const={0x41, {0x1, 0x9, 0x6, 0x9}}}, {0x53, 0x1, 0x5, {0x1, 0xfffc}, {0x6}, @period={0x5d, 0x101, 0x1bd0, 0xf078, 0x8, {0x0, 0x8, 0x8, 0x1}, 0x1, &(0x7f0000000000)=[0x8]}}}) (async) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) 05:32:52 executing program 3: r0 = eventfd2(0x7, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 05:32:52 executing program 5: socketpair(0x28, 0x1, 0x80000000, &(0x7f0000000000)) r0 = eventfd2(0x1c000000, 0x40800) eventfd2(0xac, 0x80000) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 05:32:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ca9a9e8d22aef0ceefe88e2ea0299b060c6a2a7c147b559f25cd94082a86cd05a50dac56f96b91c980c2775a399dfb4d8043a3c971d83c803211640ef80e673013c6cd9fd2794e81f5f9366422449b4f2abb41b86fc0ac383efef9284b027ce9e508474e39792ccce5652e6ca65f8eec17e39f88e5d2ed08426bb09468cd49718a46b66898f23667baaf0a33238427c9f2a08d0dba73c1fa77e93406a12ee289a8ece5969599f2e2f04ed6eb64a4f1eaaac6e95f8d3124fd9bc0fc71868fdc8309682bcd434029242bf8010f311ba45680e2a43f1a91ee5bb77a8ddf09fb8eb9b17cefff400000000000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:52 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0xb, 0x6, {0x54, 0x0, 0x2, {0x1, 0x80}, {0xff, 0xc0e8}, @const={0x41, {0x1, 0x9, 0x6, 0x9}}}, {0x53, 0x1, 0x5, {0x1, 0xfffc}, {0x6}, @period={0x5d, 0x101, 0x1bd0, 0xf078, 0x8, {0x0, 0x8, 0x8, 0x1}, 0x1, &(0x7f0000000000)=[0x8]}}}) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) 05:32:52 executing program 3: r0 = eventfd2(0x7, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 05:32:53 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000ee01f6603bbba5bfc604866890805176bac7ca233e437791f3d84a73bb3349224b89a6d9f6b9b72bbd94b078761bee0096ef1713b73200d9868b9e54ca77da158fe4d39e3e2b2153d80b1337bb07b9713cbe01", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:53 executing program 5: socketpair(0x28, 0x1, 0x80000000, &(0x7f0000000000)) r0 = eventfd2(0x1c000000, 0x40800) eventfd2(0xac, 0x80000) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) socketpair(0x28, 0x1, 0x80000000, &(0x7f0000000000)) (async) eventfd2(0x1c000000, 0x40800) (async) eventfd2(0xac, 0x80000) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async) 05:32:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000ee01f6603bbba5bfc604866890805176bac7ca233e437791f3d84a73bb3349224b89a6d9f6b9b72bbd94b078761bee0096ef1713b73200d9868b9e54ca77da158fe4d39e3e2b2153d80b1337bb07b9713cbe01", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000ee01f6603bbba5bfc604866890805176bac7ca233e437791f3d84a73bb3349224b89a6d9f6b9b72bbd94b078761bee0096ef1713b73200d9868b9e54ca77da158fe4d39e3e2b2153d80b1337bb07b9713cbe01", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) (async) 05:32:53 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2}) (fail_nth: 1) 05:32:53 executing program 5: socketpair(0x28, 0x1, 0x80000000, &(0x7f0000000000)) (async) r0 = eventfd2(0x1c000000, 0x40800) eventfd2(0xac, 0x80000) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 05:32:53 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:53 executing program 0: r0 = eventfd2(0x8, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:53 executing program 3: r0 = eventfd2(0x7, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async, rerun: 32) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) (rerun: 32) 05:32:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000ee01f6603bbba5bfc604866890805176bac7ca233e437791f3d84a73bb3349224b89a6d9f6b9b72bbd94b078761bee0096ef1713b73200d9868b9e54ca77da158fe4d39e3e2b2153d80b1337bb07b9713cbe01", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:54 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) 05:32:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x5, 0x5, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x740, 0x8, 0x4}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xace}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000005c5afd0aa196fa7c9ab32c31050000000000000058f27ab2843fdb97c19a8ca16ba85e23e5318247503ec2d7bed30e2f81f19b089e81989aea0aaae2dab185a2009d207a07c9d536206e0944350000000020e578d280344200"/106, @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b00000000009748e7601c7267e5121502d61159959a183308ddbd39cca0d2ede1dd0838b876a1c5b7a3b160503986b1a768f7ea8c5e92475cf71031"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r7, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40000) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0xc4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x4) 05:32:54 executing program 0: r0 = eventfd2(0x8, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2}) (fail_nth: 2) 05:32:54 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) [ 3101.814744][T11017] ERROR: Out of memory at tomoyo_realpath_from_path. 05:32:54 executing program 3: eventfd2(0x1, 0x801) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x52167b7d1f4c) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250800000005002d000000000008000300372d100b221d2f7915aaf39742603d17c18d306eb097a9123e3b95474f4b76", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x3bca38555426406f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24014840}, 0x800) io_setup(0x6, &(0x7f0000000480)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x200, 0x6c68, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}}, 0x8810) io_getevents(r4, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) io_getevents(r4, 0x4, 0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}) 05:32:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2}) (fail_nth: 3) 05:32:54 executing program 0: r0 = eventfd2(0x8, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x8, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) 05:32:54 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) [ 3101.894799][T11028] ERROR: Out of memory at tomoyo_realpath_from_path. 05:32:54 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) 05:32:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x5, 0x5, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x740, 0x8, 0x4}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xace}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000005c5afd0aa196fa7c9ab32c31050000000000000058f27ab2843fdb97c19a8ca16ba85e23e5318247503ec2d7bed30e2f81f19b089e81989aea0aaae2dab185a2009d207a07c9d536206e0944350000000020e578d280344200"/106, @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b00000000009748e7601c7267e5121502d61159959a183308ddbd39cca0d2ede1dd0838b876a1c5b7a3b160503986b1a768f7ea8c5e92475cf71031"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r7, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40000) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0xc4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x5, 0x5, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x740, 0x8, 0x4}}) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xace}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000005c5afd0aa196fa7c9ab32c31050000000000000058f27ab2843fdb97c19a8ca16ba85e23e5318247503ec2d7bed30e2f81f19b089e81989aea0aaae2dab185a2009d207a07c9d536206e0944350000000020e578d280344200"/106, @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b00000000009748e7601c7267e5121502d61159959a183308ddbd39cca0d2ede1dd0838b876a1c5b7a3b160503986b1a768f7ea8c5e92475cf71031"], 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r6) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r7, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40000) (async) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0xc4) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x4) (async) [ 3101.999237][T11036] FAULT_INJECTION: forcing a failure. [ 3101.999237][T11036] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:32:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2}) (fail_nth: 4) 05:32:54 executing program 0: eventfd2(0x0, 0x0) eventfd(0x546c) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) 05:32:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x5, 0x5, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x740, 0x8, 0x4}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xace}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000005c5afd0aa196fa7c9ab32c31050000000000000058f27ab2843fdb97c19a8ca16ba85e23e5318247503ec2d7bed30e2f81f19b089e81989aea0aaae2dab185a2009d207a07c9d536206e0944350000000020e578d280344200"/106, @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b00000000009748e7601c7267e5121502d61159959a183308ddbd39cca0d2ede1dd0838b876a1c5b7a3b160503986b1a768f7ea8c5e92475cf71031"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r6) (async, rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r7, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40000) (async, rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0xc4) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x4) 05:32:54 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:54 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async, rerun: 64) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) (rerun: 64) [ 3101.999272][T11036] CPU: 1 PID: 11036 Comm: syz-executor.1 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 3101.999300][T11036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:32:54 executing program 3: eventfd2(0x1, 0x801) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x52167b7d1f4c) (async) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250800000005002d000000000008000300372d100b221d2f7915aaf39742603d17c18d306eb097a9123e3b95474f4b76", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x3bca38555426406f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24014840}, 0x800) (async, rerun: 32) io_setup(0x6, &(0x7f0000000480)=0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x200, 0x6c68, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}}, 0x8810) io_getevents(r4, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) io_getevents(r4, 0x4, 0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}) [ 3101.999314][T11036] Call Trace: [ 3101.999321][T11036] [ 3101.999330][T11036] dump_stack_lvl+0xcd/0x134 05:32:54 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:54 executing program 0: eventfd2(0x0, 0x0) (async) eventfd(0x546c) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) [ 3101.999371][T11036] should_fail.cold+0x5/0xa 05:32:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2}) (fail_nth: 5) [ 3101.999403][T11036] _copy_from_user+0x2a/0x170 [ 3101.999451][T11036] video_usercopy+0xbb9/0x16c0 [ 3101.999485][T11036] ? v4l_print_control+0x60/0x60 [ 3101.999512][T11036] ? v4l_enumstd+0x60/0x60 [ 3101.999542][T11036] ? __context_tracking_exit+0xb8/0xe0 05:32:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x6, 0x4281) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="e9c644be886677bcdded2e5de00a867237a716467a1947a27cdc5bf1c2e4693056fa3f338d123bca5800b407cc359eff8ae9e30c8487d76444ffe15de79d6154f6de2453d0eb15877aaf2e64c8ff3df00b5ec5c88ba654f36783912959ceb17bcd8ffad81fa24530ae94b2c9e799964fc5815a1bc0cd8254b3d10dbdc4656da57c38cb21d7ed0e9fca5e4bda8f6293a5ae0939d677e517dad0b770027e713473082a976813b313f27702f4665c53990e868e6d91d4a796414e41b69067533106c41aeb3a934d34d12285076dc5ee1b599b4372811ddf98125a0ea75f772c42a8733ba5d34895d7000000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf250b0000000500370000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200480c1}, 0x94) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) [ 3101.999577][T11036] ? __fget_files+0x286/0x470 05:32:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2}) 05:32:54 executing program 3: eventfd2(0x1, 0x801) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x52167b7d1f4c) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250800000005002d000000000008000300372d100b221d2f7915aaf39742603d17c18d306eb097a9123e3b95474f4b76", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x3bca38555426406f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24014840}, 0x800) (async) io_setup(0x6, &(0x7f0000000480)=0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x200, 0x6c68, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}}, 0x8810) io_getevents(r4, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) io_getevents(r4, 0x4, 0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}) 05:32:54 executing program 0: eventfd2(0x0, 0x0) eventfd(0x546c) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) [ 3101.999622][T11036] v4l2_ioctl+0x1b3/0x250 [ 3101.999665][T11036] ? v4l2_prio_init+0x20/0x20 05:32:54 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) [ 3101.999705][T11036] __x64_sys_ioctl+0x193/0x200 [ 3101.999745][T11036] do_syscall_64+0x35/0xb0 [ 3101.999781][T11036] entry_SYSCALL_64_after_hwframe+0x46/0xb0 05:32:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x6, 0x4281) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="e9c644be886677bcdded2e5de00a867237a716467a1947a27cdc5bf1c2e4693056fa3f338d123bca5800b407cc359eff8ae9e30c8487d76444ffe15de79d6154f6de2453d0eb15877aaf2e64c8ff3df00b5ec5c88ba654f36783912959ceb17bcd8ffad81fa24530ae94b2c9e799964fc5815a1bc0cd8254b3d10dbdc4656da57c38cb21d7ed0e9fca5e4bda8f6293a5ae0939d677e517dad0b770027e713473082a976813b313f27702f4665c53990e868e6d91d4a796414e41b69067533106c41aeb3a934d34d12285076dc5ee1b599b4372811ddf98125a0ea75f772c42a8733ba5d34895d7000000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf250b0000000500370000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200480c1}, 0x94) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x28, 0x6, 0x4281) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="e9c644be886677bcdded2e5de00a867237a716467a1947a27cdc5bf1c2e4693056fa3f338d123bca5800b407cc359eff8ae9e30c8487d76444ffe15de79d6154f6de2453d0eb15877aaf2e64c8ff3df00b5ec5c88ba654f36783912959ceb17bcd8ffad81fa24530ae94b2c9e799964fc5815a1bc0cd8254b3d10dbdc4656da57c38cb21d7ed0e9fca5e4bda8f6293a5ae0939d677e517dad0b770027e713473082a976813b313f27702f4665c53990e868e6d91d4a796414e41b69067533106c41aeb3a934d34d12285076dc5ee1b599b4372811ddf98125a0ea75f772c42a8733ba5d34895d7000000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf250b0000000500370000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200480c1}, 0x94) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) 05:32:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x2, &(0x7f0000000280)={0x2}) [ 3101.999812][T11036] RIP: 0033:0x7f93f28890e9 [ 3101.999832][T11036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3101.999860][T11036] RSP: 002b:00007f93f3936168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3101.999885][T11036] RAX: ffffffffffffffda RBX: 00007f93f299bf60 RCX: 00007f93f28890e9 [ 3101.999903][T11036] RDX: 0000000020000280 RSI: 00000000c014563b RDI: 0000000000000003 [ 3101.999920][T11036] RBP: 00007f93f39361d0 R08: 0000000000000000 R09: 0000000000000000 [ 3101.999935][T11036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3101.999950][T11036] R13: 00007fff9f65abdf R14: 00007f93f3936300 R15: 0000000000022000 [ 3101.999983][T11036] [ 3102.151000][T11063] FAULT_INJECTION: forcing a failure. [ 3102.151000][T11063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3102.151034][T11063] CPU: 1 PID: 11063 Comm: syz-executor.1 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 3102.151061][T11063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3102.151074][T11063] Call Trace: [ 3102.151081][T11063] [ 3102.151089][T11063] dump_stack_lvl+0xcd/0x134 [ 3102.151128][T11063] should_fail.cold+0x5/0xa [ 3102.151158][T11063] _copy_to_user+0x2a/0x140 [ 3102.151203][T11063] video_usercopy+0xd8e/0x16c0 [ 3102.151237][T11063] ? v4l_print_control+0x60/0x60 [ 3102.151273][T11063] ? v4l_enumstd+0x60/0x60 [ 3102.151301][T11063] ? __context_tracking_exit+0xb8/0xe0 [ 3102.151334][T11063] ? __fget_files+0x286/0x470 [ 3102.151377][T11063] v4l2_ioctl+0x1b3/0x250 [ 3102.151409][T11063] ? v4l2_prio_init+0x20/0x20 [ 3102.151447][T11063] __x64_sys_ioctl+0x193/0x200 [ 3102.151484][T11063] do_syscall_64+0x35/0xb0 [ 3102.151514][T11063] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 3102.151542][T11063] RIP: 0033:0x7f93f28890e9 [ 3102.151562][T11063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3102.151587][T11063] RSP: 002b:00007f93f3936168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3102.151611][T11063] RAX: ffffffffffffffda RBX: 00007f93f299bf60 RCX: 00007f93f28890e9 [ 3102.151629][T11063] RDX: 0000000020000280 RSI: 00000000c014563b RDI: 0000000000000003 [ 3102.151644][T11063] RBP: 00007f93f39361d0 R08: 0000000000000000 R09: 0000000000000000 [ 3102.151659][T11063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3102.151674][T11063] R13: 00007fff9f65abdf R14: 00007f93f3936300 R15: 0000000000022000 [ 3102.151707][T11063] [ 3102.249509][T11079] FAULT_INJECTION: forcing a failure. [ 3102.249509][T11079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3102.249542][T11079] CPU: 1 PID: 11079 Comm: syz-executor.1 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 3102.249567][T11079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3102.249581][T11079] Call Trace: [ 3102.249587][T11079] [ 3102.249597][T11079] dump_stack_lvl+0xcd/0x134 [ 3102.249635][T11079] should_fail.cold+0x5/0xa [ 3102.249665][T11079] _copy_to_user+0x2a/0x140 [ 3102.249709][T11079] simple_read_from_buffer+0xcc/0x160 [ 3102.249754][T11079] proc_fail_nth_read+0x187/0x220 [ 3102.249795][T11079] ? proc_exe_link+0x1d0/0x1d0 [ 3102.249833][T11079] ? security_file_permission+0xab/0xd0 [ 3102.249879][T11079] ? proc_exe_link+0x1d0/0x1d0 [ 3102.249919][T11079] vfs_read+0x1ef/0x5d0 [ 3102.249963][T11079] ksys_read+0x127/0x250 [ 3102.250000][T11079] ? vfs_write+0xac0/0xac0 [ 3102.250040][T11079] ? syscall_enter_from_user_mode+0x21/0x70 [ 3102.250089][T11079] do_syscall_64+0x35/0xb0 [ 3102.250122][T11079] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 3102.250152][T11079] RIP: 0033:0x7f93f283bc9c [ 3102.250171][T11079] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3102.250197][T11079] RSP: 002b:00007f93f3936160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3102.250222][T11079] RAX: ffffffffffffffda RBX: 00007f93f299bf60 RCX: 00007f93f283bc9c [ 3102.250247][T11079] RDX: 000000000000000f RSI: 00007f93f39361e0 RDI: 0000000000000004 [ 3102.250264][T11079] RBP: 00007f93f39361d0 R08: 0000000000000000 R09: 0000000000000000 [ 3102.250280][T11079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3102.250297][T11079] R13: 00007fff9f65abdf R14: 00007f93f3936300 R15: 0000000000022000 [ 3102.250334][T11079] 05:32:55 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'trylock', ' ', 'mem'}, 0xc) write$fb(r1, &(0x7f0000000140)="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", 0xff) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:55 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x8000) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:55 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x6, 0x4281) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="e9c644be886677bcdded2e5de00a867237a716467a1947a27cdc5bf1c2e4693056fa3f338d123bca5800b407cc359eff8ae9e30c8487d76444ffe15de79d6154f6de2453d0eb15877aaf2e64c8ff3df00b5ec5c88ba654f36783912959ceb17bcd8ffad81fa24530ae94b2c9e799964fc5815a1bc0cd8254b3d10dbdc4656da57c38cb21d7ed0e9fca5e4bda8f6293a5ae0939d677e517dad0b770027e713473082a976813b313f27702f4665c53990e868e6d91d4a796414e41b69067533106c41aeb3a934d34d12285076dc5ee1b599b4372811ddf98125a0ea75f772c42a8733ba5d34895d7000000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf250b0000000500370000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200480c1}, 0x94) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:32:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x10, &(0x7f0000000280)={0x2}) 05:32:55 executing program 3: eventfd2(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) eventfd2(0x7, 0x801) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a63047942e3039e892cbe2862e476f48eed649818eec3ddeff68ea1e28824aa4"}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x48004) 05:32:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x541b, &(0x7f0000000280)={0x2}) 05:32:55 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:55 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) (async) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x8000) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:55 executing program 3: eventfd2(0x0, 0x0) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) eventfd2(0x7, 0x801) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a63047942e3039e892cbe2862e476f48eed649818eec3ddeff68ea1e28824aa4"}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x48004) 05:32:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x5421, &(0x7f0000000280)={0x2}) 05:32:55 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:55 executing program 0: r0 = eventfd2(0x0, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) (async) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x8000) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:55 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'trylock', ' ', 'mem'}, 0xc) write$fb(r1, &(0x7f0000000140)="4a3d82e709246883044e7cdcb8e046b14aea6b76f028c4cbb2caccefeec1316d2183e4ff6669cbe91d7417e0034c87b1a9b55c7fd71cd493c51abc78ef44a94c38cd73a2d79a5f94567c66445102445fac786f7881e7092f944a65950145fc7ade5c44b7e83a61719522d01880187081cd641033ec29b24736b7ef2edc691e46451d6e4eb51e039a8df3ccff78757cdb8b73defa0e709fa10aa69fc5afdf2d24a4eac597dd385a4315ca53b70fede85519545a92e2bb2c09830bd6110c8fbcfebcf37d6bfbd2d6e7e329601c0816a61a3708f03d794cd0e6820bef801e9c2b4b4385fa5f85c9c606f136c8908c6a6573d1f2e843061d0405fe92a2e60d4ae7", 0xff) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:32:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfeff00", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:55 executing program 3: eventfd2(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) eventfd2(0x7, 0x801) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a63047942e3039e892cbe2862e476f48eed649818eec3ddeff68ea1e28824aa4"}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x48004) eventfd2(0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r0, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) eventfd2(0x7, 0x801) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a63047942e3039e892cbe2862e476f48eed649818eec3ddeff68ea1e28824aa4"}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x48004) (async) 05:32:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x5450, &(0x7f0000000280)={0x2}) 05:32:55 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = syz_open_dev$video(&(0x7f0000000000), 0x956c, 0x1c1) r2 = eventfd(0x100) write$eventfd(r2, &(0x7f0000000040)=0x2, 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@userptr={0x0, 0xc, 0x4, 0x4, 0xfffeffff, {r3, r4/1000+60000}, {0x3, 0xc, 0x3f, 0x3, 0xd, 0x25, "0d4e748b"}, 0x1000, 0x2, {&(0x7f00000001c0)}, 0xcd47, 0x0, r5}) 05:32:55 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfeff00", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x5451, &(0x7f0000000280)={0x2}) 05:32:55 executing program 3: r0 = eventfd2(0x0, 0x0) eventfd2(0x20, 0x800) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:55 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x956c, 0x1c1) r2 = eventfd(0x100) write$eventfd(r2, &(0x7f0000000040)=0x2, 0x8) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@userptr={0x0, 0xc, 0x4, 0x4, 0xfffeffff, {r3, r4/1000+60000}, {0x3, 0xc, 0x3f, 0x3, 0xd, 0x25, "0d4e748b"}, 0x1000, 0x2, {&(0x7f00000001c0)}, 0xcd47, 0x0, r5}) 05:32:55 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'trylock', ' ', 'mem'}, 0xc) write$fb(r1, &(0x7f0000000140)="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", 0xff) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) (async) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'trylock', ' ', 'mem'}, 0xc) (async) write$fb(r1, &(0x7f0000000140)="4a3d82e709246883044e7cdcb8e046b14aea6b76f028c4cbb2caccefeec1316d2183e4ff6669cbe91d7417e0034c87b1a9b55c7fd71cd493c51abc78ef44a94c38cd73a2d79a5f94567c66445102445fac786f7881e7092f944a65950145fc7ade5c44b7e83a61719522d01880187081cd641033ec29b24736b7ef2edc691e46451d6e4eb51e039a8df3ccff78757cdb8b73defa0e709fa10aa69fc5afdf2d24a4eac597dd385a4315ca53b70fede85519545a92e2bb2c09830bd6110c8fbcfebcf37d6bfbd2d6e7e329601c0816a61a3708f03d794cd0e6820bef801e9c2b4b4385fa5f85c9c606f136c8908c6a6573d1f2e843061d0405fe92a2e60d4ae7", 0xff) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) 05:32:55 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfeff00", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x5452, &(0x7f0000000280)={0x2}) 05:32:55 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = syz_open_dev$video(&(0x7f0000000000), 0x956c, 0x1c1) r2 = eventfd(0x100) write$eventfd(r2, &(0x7f0000000040)=0x2, 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@userptr={0x0, 0xc, 0x4, 0x4, 0xfffeffff, {r3, r4/1000+60000}, {0x3, 0xc, 0x3f, 0x3, 0xd, 0x25, "0d4e748b"}, 0x1000, 0x2, {&(0x7f00000001c0)}, 0xcd47, 0x0, r5}) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) syz_open_dev$video(&(0x7f0000000000), 0x956c, 0x1c1) (async) eventfd(0x100) (async) write$eventfd(r2, &(0x7f0000000040)=0x2, 0x8) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) (async) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@userptr={0x0, 0xc, 0x4, 0x4, 0xfffeffff, {r3, r4/1000+60000}, {0x3, 0xc, 0x3f, 0x3, 0xd, 0x25, "0d4e748b"}, 0x1000, 0x2, {&(0x7f00000001c0)}, 0xcd47, 0x0, r5}) (async) 05:32:55 executing program 3: r0 = eventfd2(0x0, 0x0) eventfd2(0x20, 0x800) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) eventfd2(0x0, 0x0) (async) eventfd2(0x20, 0x800) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) 05:32:55 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:55 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, 0x0, 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x5460, &(0x7f0000000280)={0x2}) 05:32:55 executing program 3: r0 = eventfd2(0x0, 0x0) (async) eventfd2(0x20, 0x800) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:55 executing program 0: r0 = eventfd2(0x0, 0x800) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x7, 0x80800) 05:32:55 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x2f, 0x3f, 0x0, 0xffff, 0x5d, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x1, 0x7fffffff, 0x3}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000240)={0x1, 'team0\x00', {}, 0x81}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x80000) 05:32:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x40040) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800170011003b0000000000"], 0x1c}}, 0x0) 05:32:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x8933, &(0x7f0000000280)={0x2}) 05:32:55 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, 0x0, 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:55 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x3, 0xc69d, 0x7}) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r2 = eventfd(0x21f52785) write$eventfd(r2, &(0x7f0000000000)=0x1, 0x8) 05:32:55 executing program 0: r0 = eventfd2(0x0, 0x800) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) eventfd2(0x7, 0x80800) 05:32:55 executing program 5: r0 = eventfd2(0x7fe000, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x2f, 0x3f, 0x0, 0xffff, 0x5d, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x1, 0x7fffffff, 0x3}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000240)={0x1, 'team0\x00', {}, 0x81}) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x80000) 05:32:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x40040) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800170011003b0000000000"], 0x1c}}, 0x0) 05:32:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x400448c9, &(0x7f0000000280)={0x2}) 05:32:55 executing program 0: r0 = eventfd2(0x0, 0x800) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x7, 0x80800) eventfd2(0x0, 0x800) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) eventfd2(0x7, 0x80800) (async) 05:32:55 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, 0x0, 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:56 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x3, 0xc69d, 0x7}) (async, rerun: 64) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (rerun: 64) r2 = eventfd(0x21f52785) write$eventfd(r2, &(0x7f0000000000)=0x1, 0x8) 05:32:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x40040) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800170011003b0000000000"], 0x1c}}, 0x0) 05:32:56 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x400448dd, &(0x7f0000000280)={0x2}) 05:32:56 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x0, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:56 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x2f, 0x3f, 0x0, 0xffff, 0x5d, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x1, 0x7fffffff, 0x3}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000240)={0x1, 'team0\x00', {}, 0x81}) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x80000) 05:32:56 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:56 executing program 3: r0 = eventfd2(0x0, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x3, 0xc69d, 0x7}) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r2 = eventfd(0x21f52785) write$eventfd(r2, &(0x7f0000000000)=0x1, 0x8) 05:32:56 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x400454ca, &(0x7f0000000280)={0x2}) 05:32:56 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x0, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0a0029bd7000fedbdf25ffff000008002b0000002000080034000100000008000600", @ANYRES32=0x0, @ANYBLOB="050035000300000005002e00010000000800320035730000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) 05:32:56 executing program 5: r0 = eventfd2(0x7fe000, 0x800) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:56 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x40049409, &(0x7f0000000280)={0x2}) 05:32:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0a0029bd7000fedbdf25ffff000008002b0000002000080034000100000008000600", @ANYRES32=0x0, @ANYBLOB="050035000300000005002e00010000000800320035730000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0a0029bd7000fedbdf25ffff000008002b0000002000080034000100000008000600", @ANYRES32=0x0, @ANYBLOB="050035000300000005002e00010000000800320035730000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) (async) 05:32:56 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:56 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x0, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:56 executing program 5: r0 = eventfd2(0x7fe000, 0x800) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:56 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) eventfd2(0x0, 0x0) (async) openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) (async) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) (async) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) 05:32:56 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:56 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:56 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x40086602, &(0x7f0000000280)={0x2}) 05:32:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0a0029bd7000fedbdf25ffff000008002b0000002000080034000100000008000600", @ANYRES32=0x0, @ANYBLOB="050035000300000005002e00010000000800320035730000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) 05:32:56 executing program 5: r0 = eventfd2(0x7fe000, 0x800) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:56 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) (async) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:32:56 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r1, 0x5, 0x3ff, r0}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)) getpid() 05:32:57 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x401c5820, &(0x7f0000000280)={0x2}) 05:32:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r1, 0x400, 0xfffffffe, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}}, 0x8000) 05:32:57 executing program 5: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = eventfd2(0x7fe000, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) gettid() 05:32:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x4020940d, &(0x7f0000000280)={0x2}) 05:32:57 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:32:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x80086301, &(0x7f0000000280)={0x2}) 05:32:57 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:57 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) io_setup(0x101, &(0x7f0000000100)=0x0) (rerun: 32) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) (async) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r1, 0x5, 0x3ff, r0}) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)) (async) getpid() 05:32:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r1, 0x400, 0xfffffffe, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r1, 0x400, 0xfffffffe, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}}, 0x8000) (async) 05:32:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x80086601, &(0x7f0000000280)={0x2}) 05:32:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r1, 0x400, 0xfffffffe, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}}, 0x8000) 05:32:57 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:57 executing program 5: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = eventfd2(0x7fe000, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) gettid() syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) eventfd2(0x7fe000, 0x0) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) gettid() (async) 05:32:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0x801c581f, &(0x7f0000000280)={0x2}) 05:32:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8b419257d35d00"/17, @ANYRES16=0x0, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:58 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:58 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xdb835834f987da64) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0045878, &(0x7f0000000280)={0x2}) 05:32:58 executing program 5: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = eventfd2(0x7fe000, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) (async, rerun: 32) gettid() (rerun: 32) 05:32:58 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8b419257d35d00"/17, @ANYRES16=0x0, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:32:58 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) io_setup(0x101, &(0x7f0000000100)=0x0) (rerun: 64) io_submit(r4, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) (async, rerun: 32) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r1, 0x5, 0x3ff, r0}) (rerun: 32) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)) (async) getpid() 05:32:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0045878, &(0x7f0000000280)={0x2}) 05:32:58 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8b419257d35d00"/17, @ANYRES16=0x0, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8b419257d35d00"/17, @ANYRES16=0x0, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) (async) 05:32:58 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xdb835834f987da64) (async) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0145667, &(0x7f0000000280)={0x2}) 05:32:58 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000011f00080000835082fa0200000000d315c9ac38f8588100"/42], 0x1c}}, 0x0) 05:32:59 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:32:59 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000140)={0x2, 0x5}) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x4) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0xffffffff}) 05:32:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0189436, &(0x7f0000000280)={0x2}) 05:32:59 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xdb835834f987da64) (async) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000011f00080000835082fa0200000000d315c9ac38f8588100"/42], 0x1c}}, 0x0) 05:33:05 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0205647, &(0x7f0000000280)={0x2}) 05:33:05 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:05 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x3, r0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000000)={0x18}) 05:33:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r1, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x801) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) eventfd2(0x0, 0x0) eventfd2(0x0, 0x40000) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x14f882, 0x0) write$vga_arbiter(r5, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffff9c) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000240)) 05:33:05 executing program 5: r0 = eventfd2(0x7fe000, 0x0) (async) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000140)={0x2, 0x5}) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x4) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0xffffffff}) 05:33:05 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x3, r0}) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async, rerun: 64) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 64) write$vga_arbiter(r3, 0x0, 0x0) (async) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000000)={0x18}) 05:33:05 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0205649, &(0x7f0000000280)={0x2}) 05:33:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000011f00080000835082fa0200000000d315c9ac38f8588100"/42], 0x1c}}, 0x0) 05:33:05 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:05 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000140)={0x2, 0x5}) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x4) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0xffffffff}) eventfd2(0x7fe000, 0x0) (async) openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000140)={0x2, 0x5}) (async) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) (async) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x4) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0xffffffff}) (async) 05:33:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r1, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x801) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) (rerun: 64) eventfd2(0x0, 0x0) (async) eventfd2(0x0, 0x40000) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x14f882, 0x0) write$vga_arbiter(r5, 0x0, 0x0) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffff9c) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000240)) 05:33:05 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x3, r0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000000)={0x18}) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x3, r0}) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r3, 0x0, 0x0) (async) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000000)={0x18}) (async) 05:33:05 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc020660b, &(0x7f0000000280)={0x2}) 05:33:05 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x50}}, 0x2000c0c0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb281}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20008044) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r7) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r8, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r8, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd473}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x24}}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011013b000000d000"], 0x1c}}, 0x0) 05:33:05 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:05 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000280)={0x2}) 05:33:05 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x20, 0x3, 0x69, 0xfff, 0x1}) write$vga_arbiter(r1, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0xfe80) 05:33:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r1, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x801) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) (async) eventfd2(0x0, 0x0) eventfd2(0x0, 0x40000) (async) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x14f882, 0x0) write$vga_arbiter(r5, 0x0, 0x0) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffff9c) (async) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000240)) 05:33:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x50}}, 0x2000c0c0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb281}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20008044) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r7) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r8, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r8, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd473}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x24}}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011013b000000d000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x50}}, 0x2000c0c0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r5) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb281}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20008044) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r7) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r8, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r8, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd473}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x24}}, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011013b000000d000"], 0x1c}}, 0x0) (async) 05:33:05 executing program 0: r0 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000080)={0x3, r0}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x82200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r1, 0x1) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x80, r1, &(0x7f0000000140)="83ed6ddf3b3073f8adce1e510358db860848aec7540cccf822ffe55d71eb9557847e942ea5a83c975eadcddd266b23e419237ec24da539ebb878df51246745733ae958a319378927a7e30cb13fda7cea1684288069a356231dea340c1258bb3b0c7811823c3364c9f5262002b79159523df090217d363ab3f6d96480ae0f741921da48b0d26decf064c71cd1736c69fb7eb98e27f6257376e88a7c5b7df6561dc2251fb4a241c767094025f565fd31467ad9746da88778aee5f485d97eb604eeb08cb7c25bcb7d5df9df172e2ddb820216751a11453c353f28bb911e03f13c336cb52426224c34", 0xe7, 0x6d, 0x0, 0x5, r1}]) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000280)=r1, 0x1) 05:33:05 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0285629, &(0x7f0000000280)={0x2}) 05:33:05 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:05 executing program 0: r0 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000080)={0x3, r0}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x82200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r1, 0x1) (async) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x80, r1, &(0x7f0000000140)="83ed6ddf3b3073f8adce1e510358db860848aec7540cccf822ffe55d71eb9557847e942ea5a83c975eadcddd266b23e419237ec24da539ebb878df51246745733ae958a319378927a7e30cb13fda7cea1684288069a356231dea340c1258bb3b0c7811823c3364c9f5262002b79159523df090217d363ab3f6d96480ae0f741921da48b0d26decf064c71cd1736c69fb7eb98e27f6257376e88a7c5b7df6561dc2251fb4a241c767094025f565fd31467ad9746da88778aee5f485d97eb604eeb08cb7c25bcb7d5df9df172e2ddb820216751a11453c353f28bb911e03f13c336cb52426224c34", 0xe7, 0x6d, 0x0, 0x5, r1}]) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000280)=r1, 0x1) 05:33:05 executing program 3: io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket(0x25, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = eventfd2(0x6, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000081) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r6 = eventfd(0x4) io_submit(r0, 0x7, &(0x7f00000007c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000180)="086cf0219f8f734d89b53687502a5dfe6ae95e9bb139e9159f858020766ae1b9ea9ca523f6a0c09c80b029e54f10926994841f74ca096d1e58d004f6a6429e6c7896dbe95b0aae0fce2452a8961e033f738aa1e0f57e", 0x56, 0x4, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x85, r2, &(0x7f0000000240)="fd408f9befd09ae079cd284af861cefbbee22c77b30031a37d71e6f72de7962a05bc1499d08a00a475c614a4db1c5d01fc8708a4e9cd4c9b19f2aef605b3c49aa9f19c537e1ded7a8cb6342e8de99735b11e991d76450dd1915d88ec81c8ca5c28c13635d7b9ece59bb0b39f2f9028a25a1c7a38a010c3c37942bd2710c1a009653a0939e4dceee57f4920e0035c43ae02ae092a602401e6c72c36fa", 0x9c, 0x200}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000000340)="c9f9dc46799bf08e23aff681c1c2214dd16bb201eb8fd9ef2423a001b9cc1382a1f29201a104a9ce5ed2c45b9c77a27e8ffa35644622205ede7019b51f9df746ccb7bdf22e92ea6b196dbd2177df1e5a4bbc1e06224f067ae885bb7f11b7dbb2dbee3162f40ecde2310cd475fd7865b04c13d7e1aeeb0a5f4b13ea638c2a0cdd668b340f3dbc8bba6c2d1759217bc603ff645c0d7dd7e5c02388044019127d58af36c528e3ddd0204e1c4837cfd6c47a67df46f2431c092b37052e79ccb7ed8fa547d95d5ddf067e3718824c8a9929", 0xcf, 0x6, 0x0, 0x3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, r3, &(0x7f0000000480)="491c881c2f9e8325a9d3853a3bcd8f4580c7b013adc9539de4f724c1df56bd2b9aa0f15710dc2d4f32106ca56aa9678f7957a13794c2bd454e263cf32054126f7ede55a8c3b69ed05fad9daf492e678cd82215a01e62930e1e4903cd09524234223ed191041cb942ae7a0998a4bfd254b77cca0f610489b4caf99f3093e6b8fc0457fe8dd51a5c5ac32f37aae1acba375cbf4513f81a51861c1ffca5c2d9016195be44bb23394cb1597145680824", 0xae, 0x1e, 0x0, 0x2, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000580)="a9a440e15cc9ac0348d5e46684f04b84b39c3f388f2f33367b459b341198ba22fe4e4d859b4780da9c99c6fd858e3f4192c7cb68692f12e7", 0x38, 0x3, 0x0, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x3, r5, &(0x7f0000000600)="5d44a9d0cce9ef5c50ddf7f81d8c27152986b4f476a57329d265b6e06507ecb3bd63663bd9503f5abdf31602dd97be7a19c8ab80819a90d74ff4015aa6e7a1fe8c97ca2c6b14094e81065cd24a27db1215e8acade778349320ecbb475a2cee644595286625f0030016f226c2b31bb038ac96", 0x72, 0x69b06fef}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x6, 0xffffffffffffffff, &(0x7f00000006c0)="81f45ce764613214fc4f56e0b0ef95cbb5f8ea677b2d9aa7a7197c647fe210a50ce097d7eed4ac59e21771a1f7e5f7ab7ba3a2d5f59dea5f1d44fa100f8e1a140af4164080ae104245094671a2eec260db66afa6d784beb8df5ec336d54f45682fcf4bd392c6cb755dbce34696c48ee2dd6a426ecb738119aa93d040a6dadb24012e321ad42b6de04bd6527404fd1727040e2d36abb753a427488eea2c1177964ef05d5913eb0c777b6b4b48376a7d0ad9bba1ede4ca869f0be9a384ee21", 0xbe, 0x1, 0x0, 0x0, r6}]) io_pgetevents(r0, 0x6, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={[0x10001]}, 0x8}) r7 = eventfd2(0x0, 0x0) read$eventfd(r7, &(0x7f0000000100), 0x7ffffffff000) 05:33:05 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0585609, &(0x7f0000000280)={0x2}) 05:33:05 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x50}}, 0x2000c0c0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r5) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb281}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20008044) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r7) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r8, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r8, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd473}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x24}}, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000000800000011013b000000d000"], 0x1c}}, 0x0) 05:33:05 executing program 0: r0 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000080)={0x3, r0}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x82200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r1, 0x1) (async) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x80, r1, &(0x7f0000000140)="83ed6ddf3b3073f8adce1e510358db860848aec7540cccf822ffe55d71eb9557847e942ea5a83c975eadcddd266b23e419237ec24da539ebb878df51246745733ae958a319378927a7e30cb13fda7cea1684288069a356231dea340c1258bb3b0c7811823c3364c9f5262002b79159523df090217d363ab3f6d96480ae0f741921da48b0d26decf064c71cd1736c69fb7eb98e27f6257376e88a7c5b7df6561dc2251fb4a241c767094025f565fd31467ad9746da88778aee5f485d97eb604eeb08cb7c25bcb7d5df9df172e2ddb820216751a11453c353f28bb911e03f13c336cb52426224c34", 0xe7, 0x6d, 0x0, 0x5, r1}]) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000280)=r1, 0x1) (rerun: 32) 05:33:06 executing program 2: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:06 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) (async) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x20, 0x3, 0x69, 0xfff, 0x1}) (async) write$vga_arbiter(r1, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0xfe80) 05:33:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000807000008003b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc881}, 0x0) 05:33:06 executing program 0: eventfd2(0x0, 0x0) r0 = eventfd2(0x9, 0x801) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:33:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc058560f, &(0x7f0000000280)={0x2}) 05:33:06 executing program 3: io_setup(0x9, &(0x7f0000000000)=0x0) (async) r1 = socket(0x25, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = eventfd2(0x6, 0x800) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000081) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r6 = eventfd(0x4) io_submit(r0, 0x7, &(0x7f00000007c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000180)="086cf0219f8f734d89b53687502a5dfe6ae95e9bb139e9159f858020766ae1b9ea9ca523f6a0c09c80b029e54f10926994841f74ca096d1e58d004f6a6429e6c7896dbe95b0aae0fce2452a8961e033f738aa1e0f57e", 0x56, 0x4, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x85, r2, &(0x7f0000000240)="fd408f9befd09ae079cd284af861cefbbee22c77b30031a37d71e6f72de7962a05bc1499d08a00a475c614a4db1c5d01fc8708a4e9cd4c9b19f2aef605b3c49aa9f19c537e1ded7a8cb6342e8de99735b11e991d76450dd1915d88ec81c8ca5c28c13635d7b9ece59bb0b39f2f9028a25a1c7a38a010c3c37942bd2710c1a009653a0939e4dceee57f4920e0035c43ae02ae092a602401e6c72c36fa", 0x9c, 0x200}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000000340)="c9f9dc46799bf08e23aff681c1c2214dd16bb201eb8fd9ef2423a001b9cc1382a1f29201a104a9ce5ed2c45b9c77a27e8ffa35644622205ede7019b51f9df746ccb7bdf22e92ea6b196dbd2177df1e5a4bbc1e06224f067ae885bb7f11b7dbb2dbee3162f40ecde2310cd475fd7865b04c13d7e1aeeb0a5f4b13ea638c2a0cdd668b340f3dbc8bba6c2d1759217bc603ff645c0d7dd7e5c02388044019127d58af36c528e3ddd0204e1c4837cfd6c47a67df46f2431c092b37052e79ccb7ed8fa547d95d5ddf067e3718824c8a9929", 0xcf, 0x6, 0x0, 0x3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, r3, &(0x7f0000000480)="491c881c2f9e8325a9d3853a3bcd8f4580c7b013adc9539de4f724c1df56bd2b9aa0f15710dc2d4f32106ca56aa9678f7957a13794c2bd454e263cf32054126f7ede55a8c3b69ed05fad9daf492e678cd82215a01e62930e1e4903cd09524234223ed191041cb942ae7a0998a4bfd254b77cca0f610489b4caf99f3093e6b8fc0457fe8dd51a5c5ac32f37aae1acba375cbf4513f81a51861c1ffca5c2d9016195be44bb23394cb1597145680824", 0xae, 0x1e, 0x0, 0x2, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000580)="a9a440e15cc9ac0348d5e46684f04b84b39c3f388f2f33367b459b341198ba22fe4e4d859b4780da9c99c6fd858e3f4192c7cb68692f12e7", 0x38, 0x3, 0x0, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x3, r5, &(0x7f0000000600)="5d44a9d0cce9ef5c50ddf7f81d8c27152986b4f476a57329d265b6e06507ecb3bd63663bd9503f5abdf31602dd97be7a19c8ab80819a90d74ff4015aa6e7a1fe8c97ca2c6b14094e81065cd24a27db1215e8acade778349320ecbb475a2cee644595286625f0030016f226c2b31bb038ac96", 0x72, 0x69b06fef}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x6, 0xffffffffffffffff, &(0x7f00000006c0)="81f45ce764613214fc4f56e0b0ef95cbb5f8ea677b2d9aa7a7197c647fe210a50ce097d7eed4ac59e21771a1f7e5f7ab7ba3a2d5f59dea5f1d44fa100f8e1a140af4164080ae104245094671a2eec260db66afa6d784beb8df5ec336d54f45682fcf4bd392c6cb755dbce34696c48ee2dd6a426ecb738119aa93d040a6dadb24012e321ad42b6de04bd6527404fd1727040e2d36abb753a427488eea2c1177964ef05d5913eb0c777b6b4b48376a7d0ad9bba1ede4ca869f0be9a384ee21", 0xbe, 0x1, 0x0, 0x0, r6}]) (async) io_pgetevents(r0, 0x6, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={[0x10001]}, 0x8}) r7 = eventfd2(0x0, 0x0) read$eventfd(r7, &(0x7f0000000100), 0x7ffffffff000) 05:33:06 executing program 0: eventfd2(0x0, 0x0) r0 = eventfd2(0x9, 0x801) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0x0, 0x0) (async) eventfd2(0x9, 0x801) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) 05:33:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0585611, &(0x7f0000000280)={0x2}) 05:33:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000807000008003b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc881}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000807000008003b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc881}, 0x0) (async) 05:33:06 executing program 2: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:06 executing program 3: io_setup(0x9, &(0x7f0000000000)=0x0) (async) r1 = socket(0x25, 0x2, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = eventfd2(0x6, 0x800) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000081) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r6 = eventfd(0x4) io_submit(r0, 0x7, &(0x7f00000007c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000180)="086cf0219f8f734d89b53687502a5dfe6ae95e9bb139e9159f858020766ae1b9ea9ca523f6a0c09c80b029e54f10926994841f74ca096d1e58d004f6a6429e6c7896dbe95b0aae0fce2452a8961e033f738aa1e0f57e", 0x56, 0x4, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x85, r2, &(0x7f0000000240)="fd408f9befd09ae079cd284af861cefbbee22c77b30031a37d71e6f72de7962a05bc1499d08a00a475c614a4db1c5d01fc8708a4e9cd4c9b19f2aef605b3c49aa9f19c537e1ded7a8cb6342e8de99735b11e991d76450dd1915d88ec81c8ca5c28c13635d7b9ece59bb0b39f2f9028a25a1c7a38a010c3c37942bd2710c1a009653a0939e4dceee57f4920e0035c43ae02ae092a602401e6c72c36fa", 0x9c, 0x200}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000000340)="c9f9dc46799bf08e23aff681c1c2214dd16bb201eb8fd9ef2423a001b9cc1382a1f29201a104a9ce5ed2c45b9c77a27e8ffa35644622205ede7019b51f9df746ccb7bdf22e92ea6b196dbd2177df1e5a4bbc1e06224f067ae885bb7f11b7dbb2dbee3162f40ecde2310cd475fd7865b04c13d7e1aeeb0a5f4b13ea638c2a0cdd668b340f3dbc8bba6c2d1759217bc603ff645c0d7dd7e5c02388044019127d58af36c528e3ddd0204e1c4837cfd6c47a67df46f2431c092b37052e79ccb7ed8fa547d95d5ddf067e3718824c8a9929", 0xcf, 0x6, 0x0, 0x3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, r3, &(0x7f0000000480)="491c881c2f9e8325a9d3853a3bcd8f4580c7b013adc9539de4f724c1df56bd2b9aa0f15710dc2d4f32106ca56aa9678f7957a13794c2bd454e263cf32054126f7ede55a8c3b69ed05fad9daf492e678cd82215a01e62930e1e4903cd09524234223ed191041cb942ae7a0998a4bfd254b77cca0f610489b4caf99f3093e6b8fc0457fe8dd51a5c5ac32f37aae1acba375cbf4513f81a51861c1ffca5c2d9016195be44bb23394cb1597145680824", 0xae, 0x1e, 0x0, 0x2, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000580)="a9a440e15cc9ac0348d5e46684f04b84b39c3f388f2f33367b459b341198ba22fe4e4d859b4780da9c99c6fd858e3f4192c7cb68692f12e7", 0x38, 0x3, 0x0, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x3, r5, &(0x7f0000000600)="5d44a9d0cce9ef5c50ddf7f81d8c27152986b4f476a57329d265b6e06507ecb3bd63663bd9503f5abdf31602dd97be7a19c8ab80819a90d74ff4015aa6e7a1fe8c97ca2c6b14094e81065cd24a27db1215e8acade778349320ecbb475a2cee644595286625f0030016f226c2b31bb038ac96", 0x72, 0x69b06fef}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x6, 0xffffffffffffffff, &(0x7f00000006c0)="81f45ce764613214fc4f56e0b0ef95cbb5f8ea677b2d9aa7a7197c647fe210a50ce097d7eed4ac59e21771a1f7e5f7ab7ba3a2d5f59dea5f1d44fa100f8e1a140af4164080ae104245094671a2eec260db66afa6d784beb8df5ec336d54f45682fcf4bd392c6cb755dbce34696c48ee2dd6a426ecb738119aa93d040a6dadb24012e321ad42b6de04bd6527404fd1727040e2d36abb753a427488eea2c1177964ef05d5913eb0c777b6b4b48376a7d0ad9bba1ede4ca869f0be9a384ee21", 0xbe, 0x1, 0x0, 0x0, r6}]) io_pgetevents(r0, 0x6, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={[0x10001]}, 0x8}) (async) r7 = eventfd2(0x0, 0x0) read$eventfd(r7, &(0x7f0000000100), 0x7ffffffff000) 05:33:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc058565d, &(0x7f0000000280)={0x2}) 05:33:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000807000008003b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc881}, 0x0) 05:33:07 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r2 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x20, 0x3, 0x69, 0xfff, 0x1}) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) read$eventfd(r1, &(0x7f0000000000), 0xfe80) 05:33:07 executing program 2: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:07 executing program 0: eventfd2(0x0, 0x0) (async) r0 = eventfd2(0x9, 0x801) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:33:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0d05604, &(0x7f0000000280)={0x2}) 05:33:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:33:07 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = eventfd(0x8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x3, r1}) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:33:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0d05605, &(0x7f0000000280)={0x2}) 05:33:07 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = eventfd(0x8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x3, r1}) (async, rerun: 32) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (rerun: 32) 05:33:07 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:33:07 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, 0x0, 0x0) 05:33:07 executing program 3: r0 = eventfd2(0x0, 0x0) (async) r1 = eventfd(0x8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x3, r1}) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:33:07 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) 05:33:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0d05640, &(0x7f0000000280)={0x2}) 05:33:07 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, 0x0, 0x0) 05:33:07 executing program 5: r0 = eventfd2(0x77e000, 0x80001) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) io_setup(0x87c, &(0x7f0000000000)=0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001640), 0x2002, 0x0) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x3) write$vga_arbiter(r2, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000016c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001700)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048}, 0x44) r7 = eventfd2(0x2794, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r9, 0x0, 0x0) io_submit(r1, 0x5, &(0x7f0000001500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000140)="1a8e5dc23be06df8c88586ab0ef12b65881b95f223b6f8319d5ed0e82af05391eea4a67ddc7730d3305ada56c1abfe7a61fdac2c565a95c432168b9a0cb2de4bf31f444a1fd1a7941197d6248e9d69aff10e2c85fe532cea44288dbf2a5e8a1868c122fe3243c49cd16fd9d4b8b3649aa58b7fe5ac5661e8cf26e5ee0072c36e89172234cf70a97f03490a40e90cc1b0e45fb254ed181df4f41ef4422800a97ec8574314d53ef0aafe445715d4f9bbf207d8d7a92511d8557b737f18dca822bae57e47db849e4426f996ba14d0add521219667", 0xd3, 0x388, 0x0, 0x0, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x1f, r4, &(0x7f0000000240)="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", 0x1000, 0x4, 0x0, 0x1, r0}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x8000, r0, &(0x7f0000001240)="6c8726efc2b542a626e9009df9adee05c6e4d8dba3f352ded25f59e9b964c68a04a468fbc54b3a25081190d2c444017ffdc927d0dc1632038c27793e80d7bddb916c726f0b49c89f334848959785b6d24bd1965f7c4eabfca1c70a980c8b65053bbf614a2f775d825b389c8fd87146f85e2aca05f53a95b266040b16b37b94f607fe00b5643ccb5775bf16a7bc80d3da8f2d24d20a85abdb0bca6239e1ef4731b1a75c31472a6f8be4c1a7d138191382b1be55cc8612bc28dba704a6fa362fbf83aad94024bb2bec63008e2f514bf923a5832d74302078252c8faaad353226a296e4b93954042dfafc29", 0xea, 0x180000, 0x0, 0x3, r7}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000001380)="e7fe1f3e265c49ed6c57376a4e20f4a575c6017317b8ae418137aa744f6cde55ef69b86f88a4f09a5918bb09edf42fb032be8613ccf6fd3bbae81b850113f29b6df08580e58027ab29d361e7f95abe12ccbac4061bda394536410ffe607c01cd7042658ee094d540", 0x68, 0x0, 0x0, 0x1, r0}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x8, 0x1, r8, &(0x7f0000001440)="449a4702484262a19d0666e3d1fb263fba6e903ead285234f228b982b2d5a4992929897b5c51c10b8608fbd82df79e023e0ad22681d4bce25ab35834427756b5a0f57a62b02eb4efdbed8a7356b688866263", 0x52, 0x4, 0x0, 0x1, r9}]) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 05:33:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000011003b0000000000"], 0x1c}}, 0x0) 05:33:07 executing program 3: ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}) r0 = syz_open_dev$video(&(0x7f0000000280), 0x5, 0x701081) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)=@multiplanar_mmap={0x1, 0x5, 0x4, 0x100, 0x5, {}, {0x3, 0xc, 0x4, 0x3, 0x0, 0x3f, "cb2ed1c0"}, 0x1, 0x1, {&(0x7f00000002c0)=[{0x8000, 0x9, {0x9}, 0x6}, {0x5ca, 0xc7, {0x81}, 0x61b7}]}}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f00000005c0)) socketpair(0x1d, 0x3, 0x46fa0000, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r2) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) r3 = eventfd2(0x4, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r6) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000580)={0x38, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x104) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000240)={0x2, 0x5, &(0x7f0000000040)=[0x1, 0x2, 0xdd, 0x9, 0x40], &(0x7f00000000c0)=[0x400, 0x1, 0xfdb, 0x800, 0x401, 0x4, 0x8001, 0x200, 0x7], &(0x7f00000001c0)=[0xdaa3], &(0x7f0000000200)=[0x8a0f, 0x552e, 0x5, 0xd8, 0x4]}) read$eventfd(r3, &(0x7f0000000100), 0x7ffffffff000) 05:33:07 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) 05:33:07 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, 0x0, 0x0) 05:33:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x4}) 05:33:07 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf25060000000c001000080000000000000008000c00020000000800000105000d000000000008000c00020000db086e024b37e55a2420fa862218dd011d7d49225e5736d04717712066a8ed72bea48920f1ae2ec152af3492e56b76a2451ee30ddfa8a6519c03be6b4dc45e3c1eb93298534a71dae1c1019861247ee0875a65a180a507839e8b1b3af520b009aee206fd8d7d9fb0f52ffbdf9c12a1c7aaec8f620ea7b53d50a3a371a7e6446aad5cd10aba5b330d482e89090a8b8e22", @ANYRES32=r0, @ANYBLOB="06001b004e210000080009000300000006001d009104000014001f00fc020000000000000000000000000001"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x2) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) 05:33:07 executing program 0: r0 = eventfd2(0x3, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:07 executing program 3: ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}) r0 = syz_open_dev$video(&(0x7f0000000280), 0x5, 0x701081) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)=@multiplanar_mmap={0x1, 0x5, 0x4, 0x100, 0x5, {}, {0x3, 0xc, 0x4, 0x3, 0x0, 0x3f, "cb2ed1c0"}, 0x1, 0x1, {&(0x7f00000002c0)=[{0x8000, 0x9, {0x9}, 0x6}, {0x5ca, 0xc7, {0x81}, 0x61b7}]}}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f00000005c0)) socketpair(0x1d, 0x3, 0x46fa0000, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r2) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) r3 = eventfd2(0x4, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r6) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000580)={0x38, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x104) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000240)={0x2, 0x5, &(0x7f0000000040)=[0x1, 0x2, 0xdd, 0x9, 0x40], &(0x7f00000000c0)=[0x400, 0x1, 0xfdb, 0x800, 0x401, 0x4, 0x8001, 0x200, 0x7], &(0x7f00000001c0)=[0xdaa3], &(0x7f0000000200)=[0x8a0f, 0x552e, 0x5, 0xd8, 0x4]}) read$eventfd(r3, &(0x7f0000000100), 0x7ffffffff000) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}) (async) syz_open_dev$video(&(0x7f0000000280), 0x5, 0x701081) (async) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)=@multiplanar_mmap={0x1, 0x5, 0x4, 0x100, 0x5, {}, {0x3, 0xc, 0x4, 0x3, 0x0, 0x3f, "cb2ed1c0"}, 0x1, 0x1, {&(0x7f00000002c0)=[{0x8000, 0x9, {0x9}, 0x6}, {0x5ca, 0xc7, {0x81}, 0x61b7}]}}) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f00000005c0)) (async) socketpair(0x1d, 0x3, 0x46fa0000, &(0x7f0000000440)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r2) (async) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) (async) eventfd2(0x4, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r4, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r6) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000580)={0x38, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x104) (async) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000240)={0x2, 0x5, &(0x7f0000000040)=[0x1, 0x2, 0xdd, 0x9, 0x40], &(0x7f00000000c0)=[0x400, 0x1, 0xfdb, 0x800, 0x401, 0x4, 0x8001, 0x200, 0x7], &(0x7f00000001c0)=[0xdaa3], &(0x7f0000000200)=[0x8a0f, 0x552e, 0x5, 0xd8, 0x4]}) (async) read$eventfd(r3, &(0x7f0000000100), 0x7ffffffff000) (async) 05:33:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x7}) 05:33:07 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:07 executing program 0: r0 = eventfd2(0x3, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:08 executing program 5: r0 = eventfd2(0x77e000, 0x80001) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) io_setup(0x87c, &(0x7f0000000000)=0x0) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001640), 0x2002, 0x0) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x3) (async) write$vga_arbiter(r2, 0x0, 0x0) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000016c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001700)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048}, 0x44) (async) r7 = eventfd2(0x2794, 0x800) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r9, 0x0, 0x0) (async) io_submit(r1, 0x5, &(0x7f0000001500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000140)="1a8e5dc23be06df8c88586ab0ef12b65881b95f223b6f8319d5ed0e82af05391eea4a67ddc7730d3305ada56c1abfe7a61fdac2c565a95c432168b9a0cb2de4bf31f444a1fd1a7941197d6248e9d69aff10e2c85fe532cea44288dbf2a5e8a1868c122fe3243c49cd16fd9d4b8b3649aa58b7fe5ac5661e8cf26e5ee0072c36e89172234cf70a97f03490a40e90cc1b0e45fb254ed181df4f41ef4422800a97ec8574314d53ef0aafe445715d4f9bbf207d8d7a92511d8557b737f18dca822bae57e47db849e4426f996ba14d0add521219667", 0xd3, 0x388, 0x0, 0x0, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x1f, r4, &(0x7f0000000240)="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", 0x1000, 0x4, 0x0, 0x1, r0}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x8000, r0, &(0x7f0000001240)="6c8726efc2b542a626e9009df9adee05c6e4d8dba3f352ded25f59e9b964c68a04a468fbc54b3a25081190d2c444017ffdc927d0dc1632038c27793e80d7bddb916c726f0b49c89f334848959785b6d24bd1965f7c4eabfca1c70a980c8b65053bbf614a2f775d825b389c8fd87146f85e2aca05f53a95b266040b16b37b94f607fe00b5643ccb5775bf16a7bc80d3da8f2d24d20a85abdb0bca6239e1ef4731b1a75c31472a6f8be4c1a7d138191382b1be55cc8612bc28dba704a6fa362fbf83aad94024bb2bec63008e2f514bf923a5832d74302078252c8faaad353226a296e4b93954042dfafc29", 0xea, 0x180000, 0x0, 0x3, r7}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000001380)="e7fe1f3e265c49ed6c57376a4e20f4a575c6017317b8ae418137aa744f6cde55ef69b86f88a4f09a5918bb09edf42fb032be8613ccf6fd3bbae81b850113f29b6df08580e58027ab29d361e7f95abe12ccbac4061bda394536410ffe607c01cd7042658ee094d540", 0x68, 0x0, 0x0, 0x1, r0}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x8, 0x1, r8, &(0x7f0000001440)="449a4702484262a19d0666e3d1fb263fba6e903ead285234f228b982b2d5a4992929897b5c51c10b8608fbd82df79e023e0ad22681d4bce25ab35834427756b5a0f57a62b02eb4efdbed8a7356b688866263", 0x52, 0x4, 0x0, 0x1, r9}]) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 05:33:08 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf25060000000c001000080000000000000008000c00020000000800000105000d000000000008000c00020000db086e024b37e55a2420fa862218dd011d7d49225e5736d04717712066a8ed72bea48920f1ae2ec152af3492e56b76a2451ee30ddfa8a6519c03be6b4dc45e3c1eb93298534a71dae1c1019861247ee0875a65a180a507839e8b1b3af520b009aee206fd8d7d9fb0f52ffbdf9c12a1c7aaec8f620ea7b53d50a3a371a7e6446aad5cd10aba5b330d482e89090a8b8e22", @ANYRES32=r0, @ANYBLOB="06001b004e210000080009000300000006001d009104000014001f00fc020000000000000000000000000001"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x2) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) 05:33:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x9}) 05:33:08 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:08 executing program 3: ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}) (async) r0 = syz_open_dev$video(&(0x7f0000000280), 0x5, 0x701081) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)=@multiplanar_mmap={0x1, 0x5, 0x4, 0x100, 0x5, {}, {0x3, 0xc, 0x4, 0x3, 0x0, 0x3f, "cb2ed1c0"}, 0x1, 0x1, {&(0x7f00000002c0)=[{0x8000, 0x9, {0x9}, 0x6}, {0x5ca, 0xc7, {0x81}, 0x61b7}]}}) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f00000005c0)) (async) socketpair(0x1d, 0x3, 0x46fa0000, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r2) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) (async) r3 = eventfd2(0x4, 0x0) (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x804) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r6) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000580)={0x38, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x104) (async) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000240)={0x2, 0x5, &(0x7f0000000040)=[0x1, 0x2, 0xdd, 0x9, 0x40], &(0x7f00000000c0)=[0x400, 0x1, 0xfdb, 0x800, 0x401, 0x4, 0x8001, 0x200, 0x7], &(0x7f00000001c0)=[0xdaa3], &(0x7f0000000200)=[0x8a0f, 0x552e, 0x5, 0xd8, 0x4]}) (async) read$eventfd(r3, &(0x7f0000000100), 0x7ffffffff000) 05:33:08 executing program 0: r0 = eventfd2(0x3, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:08 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (fail_nth: 1) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:08 executing program 0: eventfd2(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 05:33:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0xa}) 05:33:08 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf25060000000c001000080000000000000008000c00020000000800000105000d000000000008000c00020000db086e024b37e55a2420fa862218dd011d7d49225e5736d04717712066a8ed72bea48920f1ae2ec152af3492e56b76a2451ee30ddfa8a6519c03be6b4dc45e3c1eb93298534a71dae1c1019861247ee0875a65a180a507839e8b1b3af520b009aee206fd8d7d9fb0f52ffbdf9c12a1c7aaec8f620ea7b53d50a3a371a7e6446aad5cd10aba5b330d482e89090a8b8e22", @ANYRES32=r0, @ANYBLOB="06001b004e210000080009000300000006001d009104000014001f00fc020000000000000000000000000001"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x2) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) 05:33:08 executing program 3: r0 = eventfd2(0x0, 0x0) eventfd2(0x0, 0x80001) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:33:08 executing program 5: r0 = eventfd2(0x77e000, 0x80001) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) io_setup(0x87c, &(0x7f0000000000)=0x0) (async, rerun: 32) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async, rerun: 32) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001640), 0x2002, 0x0) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x3) write$vga_arbiter(r2, 0x0, 0x0) (async, rerun: 64) r4 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000016c0), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001700)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048}, 0x44) (async) r7 = eventfd2(0x2794, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r9, 0x0, 0x0) io_submit(r1, 0x5, &(0x7f0000001500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000140)="1a8e5dc23be06df8c88586ab0ef12b65881b95f223b6f8319d5ed0e82af05391eea4a67ddc7730d3305ada56c1abfe7a61fdac2c565a95c432168b9a0cb2de4bf31f444a1fd1a7941197d6248e9d69aff10e2c85fe532cea44288dbf2a5e8a1868c122fe3243c49cd16fd9d4b8b3649aa58b7fe5ac5661e8cf26e5ee0072c36e89172234cf70a97f03490a40e90cc1b0e45fb254ed181df4f41ef4422800a97ec8574314d53ef0aafe445715d4f9bbf207d8d7a92511d8557b737f18dca822bae57e47db849e4426f996ba14d0add521219667", 0xd3, 0x388, 0x0, 0x0, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x1f, r4, &(0x7f0000000240)="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", 0x1000, 0x4, 0x0, 0x1, r0}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x8000, r0, &(0x7f0000001240)="6c8726efc2b542a626e9009df9adee05c6e4d8dba3f352ded25f59e9b964c68a04a468fbc54b3a25081190d2c444017ffdc927d0dc1632038c27793e80d7bddb916c726f0b49c89f334848959785b6d24bd1965f7c4eabfca1c70a980c8b65053bbf614a2f775d825b389c8fd87146f85e2aca05f53a95b266040b16b37b94f607fe00b5643ccb5775bf16a7bc80d3da8f2d24d20a85abdb0bca6239e1ef4731b1a75c31472a6f8be4c1a7d138191382b1be55cc8612bc28dba704a6fa362fbf83aad94024bb2bec63008e2f514bf923a5832d74302078252c8faaad353226a296e4b93954042dfafc29", 0xea, 0x180000, 0x0, 0x3, r7}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000001380)="e7fe1f3e265c49ed6c57376a4e20f4a575c6017317b8ae418137aa744f6cde55ef69b86f88a4f09a5918bb09edf42fb032be8613ccf6fd3bbae81b850113f29b6df08580e58027ab29d361e7f95abe12ccbac4061bda394536410ffe607c01cd7042658ee094d540", 0x68, 0x0, 0x0, 0x1, r0}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x8, 0x1, r8, &(0x7f0000001440)="449a4702484262a19d0666e3d1fb263fba6e903ead285234f228b982b2d5a4992929897b5c51c10b8608fbd82df79e023e0ad22681d4bce25ab35834427756b5a0f57a62b02eb4efdbed8a7356b688866263", 0x52, 0x4, 0x0, 0x1, r9}]) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 05:33:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0xb}) [ 3116.349775][T11745] ERROR: Out of memory at tomoyo_realpath_from_path. 05:33:08 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (fail_nth: 2) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:08 executing program 0: eventfd2(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) eventfd2(0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r0, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) 05:33:08 executing program 3: r0 = eventfd2(0x0, 0x0) eventfd2(0x0, 0x80001) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) eventfd2(0x0, 0x0) (async) eventfd2(0x0, 0x80001) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) 05:33:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0xe}) 05:33:08 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (fail_nth: 3) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:08 executing program 3: r0 = eventfd2(0x0, 0x0) (async) eventfd2(0x0, 0x80001) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:33:08 executing program 0: eventfd2(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) [ 3116.480493][T11767] ERROR: Out of memory at tomoyo_realpath_from_path. 05:33:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2}) 05:33:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0xc0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:33:08 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x6, 0x8) [ 3116.592304][T11780] FAULT_INJECTION: forcing a failure. [ 3116.592304][T11780] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:33:08 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:33:08 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (fail_nth: 4) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:08 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = eventfd2(0x2, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) socketpair(0xf, 0x2, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x804) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="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"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000225bd7000fbdbdf250f000000060028000300000005002a000100000008000300", @ANYRES32=r6, @ANYBLOB="08003c0004000000050038000000000008000b0000bb0d00"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4004001) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5b}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) write$eventfd(r0, &(0x7f0000000280)=0x4, 0x8) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r8, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000080), 0x1) 05:33:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x2}}) 05:33:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0xc0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:33:08 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) write$eventfd(r1, &(0x7f0000000000)=0x6, 0x8) [ 3116.592337][T11780] CPU: 0 PID: 11780 Comm: syz-executor.2 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 3116.592364][T11780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:33:09 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (fail_nth: 5) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:09 executing program 3: r0 = eventfd2(0x0, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = eventfd2(0x2, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async, rerun: 32) socketpair(0xf, 0x2, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x804) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="00002bbd700000000000050000006fa640a50e3d926f79574294d0f31b00f24d0a96ce5e2af68d1726092f3f289c750525efcd30e9e62dcbc9d17bcb08476a9fdfe5c8106a6eaa810e03c87cc254d2dbe425a416f369ea62339aa1f241ff4a4475e82e3b027753c27928b84793f5ca3a61153f863c78f49732f2d5f05481e2c6cb181ffdeed7396e0b646513b3c2f316b2a6bf1a00f4a35476c7002ece26d3e0bd49020209421c5e8873115c14c4595d3db45e794d4df9fa15a725e5ca82845d3e4a95038343f592b7ffb4e513b56c0ccfe36bda457bfacec5c8c8f660ccc95b28e91ff6e34be4bf580796a026e42dd75cda4b6c6ea4c42d5891352e9dbd0523e62d50be2ece4ceaa184f9acc0defbe68d4356a4295943efe753f1acd4265fd33fe76120f8c736a1ce2768ae188e3681dae582966cb0edd3cc624cd3707c0e79cfa8dbc82093c121162ea41d446334499a6595c7644a5fa7f7afbb77199623fe7d55e3d697c9f57fa5250360e85927df0e51e6ac8ad246c1ac7395af51e492b04f7db8ae212334e42df59f3acde3ada8be271dc045e51f48be3660c701045336d1aa4eb63bf75c44a83b6040c07b6d0ee495ad4db1dabf5d05a3688ad80cf2d4062972e29f9c5ea484b4554901f1b9317d32033f7dfbd5c80e97b91665748b5b2c57b9b682974e24dbb54c"], 0x14}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000225bd7000fbdbdf250f000000060028000300000005002a000100000008000300", @ANYRES32=r6, @ANYBLOB="08003c0004000000050038000000000008000b0000bb0d00"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4004001) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5b}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) (async) write$eventfd(r0, &(0x7f0000000280)=0x4, 0x8) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r8, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000080), 0x1) 05:33:09 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x3}}) 05:33:09 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) [ 3116.592385][T11780] Call Trace: 05:33:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0xc0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) [ 3116.592392][T11780] [ 3116.592401][T11780] dump_stack_lvl+0xcd/0x134 [ 3116.592440][T11780] should_fail.cold+0x5/0xa 05:33:09 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x6, 0x8) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) write$eventfd(r1, &(0x7f0000000000)=0x6, 0x8) (async) 05:33:09 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x4}}) 05:33:09 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (fail_nth: 6) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) [ 3116.592470][T11780] _copy_from_user+0x2a/0x170 [ 3116.592514][T11780] binder_ctl_ioctl+0x12c/0x190 [ 3116.592650][T11780] ? binderfs_binder_device_create.isra.0+0xbd0/0xbd0 05:33:09 executing program 3: r0 = eventfd2(0x0, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = eventfd2(0x2, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) socketpair(0xf, 0x2, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x804) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="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"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000225bd7000fbdbdf250f000000060028000300000005002a000100000008000300", @ANYRES32=r6, @ANYBLOB="08003c0004000000050038000000000008000b0000bb0d00"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4004001) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5b}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) write$eventfd(r0, &(0x7f0000000280)=0x4, 0x8) (async) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r8, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000080), 0x1) 05:33:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:33:09 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) [ 3116.592702][T11780] ? __context_tracking_exit+0xb8/0xe0 [ 3116.592738][T11780] ? __fget_files+0x286/0x470 [ 3116.592780][T11780] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 05:33:09 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) eventfd2(0x101, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x2, 0x40002) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) r3 = syz_open_dev$video(&(0x7f0000000180), 0x6, 0x90000) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000000bc0)={&(0x7f00000002c0)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/26, 0x1a}, {&(0x7f0000000980)=""/115, 0x73}, {&(0x7f0000000a40)}], 0x8, &(0x7f0000000b80)=""/16, 0x10}, 0x2000) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x7, 0x9, 0x4, {0x8, @win={{0x0, 0x6, 0x5, 0xfc0}, 0x0, 0x0, &(0x7f0000000240)={{0x3, 0x8, 0xfffffffd, 0x401}, &(0x7f0000000200)={{0x81, 0x1ff, 0x9, 0x1985d425}, &(0x7f00000001c0)={{0x4, 0x56ce7fbc, 0xfffffff8}}}}, 0x81, &(0x7f0000000380)="4cd33e21a8e2a8dd0f5e95a99f8ffb3018a455a4f8135241f5f0836753d54f195a9293f70005dd6c3d4766e5960e4cf6ed4ae77d49793f33c965e4249a22a179d09f30307533749e06963b701eee60460ff697c54ed296e148fde1c10d3b007c3c9efe0782563a2c1d5c2fbdaf1927cf245db4853a5a6d50cc9df80f4278771d52dcd6e52b8c0ef08e35c7e2738729d86d6a7eefa03e6c426458d22c247f8f3038da6ba45346a482c1a43233619c104bfd2e69f1dbbc274713b60c603942e67e53738b1194a91cec27", 0x7}}, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc78af42425c0bce8fb50427aba5e41b14000000", @ANYRES16=r6, @ANYBLOB="00002bbd70000000000005000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) write$vga_arbiter(r1, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 05:33:09 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (fail_nth: 7) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:09 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x5}}) [ 3116.592815][T11780] ? binderfs_binder_device_create.isra.0+0xbd0/0xbd0 [ 3116.592847][T11780] __x64_sys_ioctl+0x193/0x200 [ 3116.592885][T11780] do_syscall_64+0x35/0xb0 05:33:09 executing program 3: r0 = eventfd2(0x0, 0xa724da967a7f6f47) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0xffff8001, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:33:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:33:09 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x6}}) 05:33:09 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (fail_nth: 8) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:09 executing program 5: r0 = eventfd2(0xfffffffc, 0x80000) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000040), 0xffffff4a) r1 = eventfd(0x3f) write$eventfd(r1, &(0x7f0000000000)=0x7, 0x8) [ 3116.592917][T11780] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 3116.592945][T11780] RIP: 0033:0x7f32188890e9 [ 3116.592963][T11780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 05:33:09 executing program 3: r0 = eventfd2(0x0, 0xa724da967a7f6f47) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0xffff8001, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (rerun: 64) 05:33:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:33:09 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x7}}) 05:33:09 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (fail_nth: 9) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) [ 3116.592989][T11780] RSP: 002b:00007f321997c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3116.593015][T11780] RAX: ffffffffffffffda RBX: 00007f321899bf60 RCX: 00007f32188890e9 [ 3116.593032][T11780] RDX: 0000000020000140 RSI: 00000000c1086201 RDI: 0000000000000005 [ 3116.593048][T11780] RBP: 00007f321997c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3116.593064][T11780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3116.593079][T11780] R13: 00007fff21414c4f R14: 00007f321997c300 R15: 0000000000022000 [ 3116.593112][T11780] [ 3117.199109][T11856] FAULT_INJECTION: forcing a failure. [ 3117.199109][T11856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3117.199141][T11856] CPU: 1 PID: 11856 Comm: syz-executor.2 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 3117.199168][T11856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3117.199182][T11856] Call Trace: [ 3117.199188][T11856] [ 3117.199196][T11856] dump_stack_lvl+0xcd/0x134 [ 3117.199233][T11856] should_fail.cold+0x5/0xa [ 3117.199262][T11856] _copy_to_user+0x2a/0x140 [ 3117.199305][T11856] binderfs_binder_device_create.isra.0+0x681/0xbd0 [ 3117.199341][T11856] ? binder_ctl_ioctl+0x138/0x190 [ 3117.199368][T11856] binder_ctl_ioctl+0x171/0x190 [ 3117.199392][T11856] ? binderfs_binder_device_create.isra.0+0xbd0/0xbd0 [ 3117.199456][T11856] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3117.199489][T11856] ? binderfs_binder_device_create.isra.0+0xbd0/0xbd0 [ 3117.199520][T11856] __x64_sys_ioctl+0x193/0x200 [ 3117.199555][T11856] do_syscall_64+0x35/0xb0 [ 3117.199588][T11856] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 3117.199617][T11856] RIP: 0033:0x7f32188890e9 [ 3117.199636][T11856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3117.199660][T11856] RSP: 002b:00007f321997c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3117.199684][T11856] RAX: ffffffffffffffda RBX: 00007f321899bf60 RCX: 00007f32188890e9 [ 3117.199702][T11856] RDX: 0000000020000140 RSI: 00000000c1086201 RDI: 0000000000000005 [ 3117.199725][T11856] RBP: 00007f321997c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3117.199740][T11856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3117.199756][T11856] R13: 00007fff21414c4f R14: 00007f321997c300 R15: 0000000000022000 [ 3117.199791][T11856] [ 3117.289274][T11866] FAULT_INJECTION: forcing a failure. [ 3117.289274][T11866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3117.289307][T11866] CPU: 1 PID: 11866 Comm: syz-executor.2 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 3117.289332][T11866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3117.289345][T11866] Call Trace: [ 3117.289352][T11866] [ 3117.289360][T11866] dump_stack_lvl+0xcd/0x134 [ 3117.289400][T11866] should_fail.cold+0x5/0xa [ 3117.289430][T11866] _copy_to_user+0x2a/0x140 [ 3117.289471][T11866] simple_read_from_buffer+0xcc/0x160 [ 3117.289514][T11866] proc_fail_nth_read+0x187/0x220 [ 3117.289554][T11866] ? proc_exe_link+0x1d0/0x1d0 [ 3117.289590][T11866] ? security_file_permission+0xab/0xd0 [ 3117.289633][T11866] ? proc_exe_link+0x1d0/0x1d0 [ 3117.289668][T11866] vfs_read+0x1ef/0x5d0 [ 3117.289715][T11866] ksys_read+0x127/0x250 [ 3117.289750][T11866] ? vfs_write+0xac0/0xac0 [ 3117.289788][T11866] ? syscall_enter_from_user_mode+0x21/0x70 [ 3117.289839][T11866] do_syscall_64+0x35/0xb0 [ 3117.289869][T11866] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 3117.289897][T11866] RIP: 0033:0x7f321883bc9c [ 3117.289915][T11866] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3117.289937][T11866] RSP: 002b:00007f321997c160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3117.289960][T11866] RAX: ffffffffffffffda RBX: 00007f321899bf60 RCX: 00007f321883bc9c [ 3117.289976][T11866] RDX: 000000000000000f RSI: 00007f321997c1e0 RDI: 0000000000000006 [ 3117.289990][T11866] RBP: 00007f321997c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3117.290004][T11866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3117.290018][T11866] R13: 00007fff21414c4f R14: 00007f321997c300 R15: 0000000000022000 [ 3117.290053][T11866] 05:33:10 executing program 3: r0 = eventfd2(0x0, 0xa724da967a7f6f47) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0xffff8001, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) eventfd2(0x0, 0xa724da967a7f6f47) (async) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0xffff8001, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) 05:33:10 executing program 5: r0 = eventfd2(0xfffffffc, 0x80000) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000040), 0xffffff4a) r1 = eventfd(0x3f) write$eventfd(r1, &(0x7f0000000000)=0x7, 0x8) 05:33:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28000804}, 0x4000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB], 0x1c}}, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4890) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c87dd2bc6cdc27d30000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fddbdf250100000014000700fe80000000000000000000000000000f0800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 05:33:10 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:10 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) eventfd2(0x101, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x2, 0x40002) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) r3 = syz_open_dev$video(&(0x7f0000000180), 0x6, 0x90000) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000000bc0)={&(0x7f00000002c0)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/26, 0x1a}, {&(0x7f0000000980)=""/115, 0x73}, {&(0x7f0000000a40)}], 0x8, &(0x7f0000000b80)=""/16, 0x10}, 0x2000) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x7, 0x9, 0x4, {0x8, @win={{0x0, 0x6, 0x5, 0xfc0}, 0x0, 0x0, &(0x7f0000000240)={{0x3, 0x8, 0xfffffffd, 0x401}, &(0x7f0000000200)={{0x81, 0x1ff, 0x9, 0x1985d425}, &(0x7f00000001c0)={{0x4, 0x56ce7fbc, 0xfffffff8}}}}, 0x81, &(0x7f0000000380)="4cd33e21a8e2a8dd0f5e95a99f8ffb3018a455a4f8135241f5f0836753d54f195a9293f70005dd6c3d4766e5960e4cf6ed4ae77d49793f33c965e4249a22a179d09f30307533749e06963b701eee60460ff697c54ed296e148fde1c10d3b007c3c9efe0782563a2c1d5c2fbdaf1927cf245db4853a5a6d50cc9df80f4278771d52dcd6e52b8c0ef08e35c7e2738729d86d6a7eefa03e6c426458d22c247f8f3038da6ba45346a482c1a43233619c104bfd2e69f1dbbc274713b60c603942e67e53738b1194a91cec27", 0x7}}, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc78af42425c0bce8fb50427aba5e41b14000000", @ANYRES16=r6, @ANYBLOB="00002bbd70000000000005000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) write$vga_arbiter(r1, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r0, 0x0, 0x0) (async) eventfd2(0x101, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000040), 0x2, 0x40002) (async) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) (async) syz_open_dev$video(&(0x7f0000000180), 0x6, 0x90000) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) recvmsg$can_bcm(r4, &(0x7f0000000bc0)={&(0x7f00000002c0)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/26, 0x1a}, {&(0x7f0000000980)=""/115, 0x73}, {&(0x7f0000000a40)}], 0x8, &(0x7f0000000b80)=""/16, 0x10}, 0x2000) (async) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x7, 0x9, 0x4, {0x8, @win={{0x0, 0x6, 0x5, 0xfc0}, 0x0, 0x0, &(0x7f0000000240)={{0x3, 0x8, 0xfffffffd, 0x401}, &(0x7f0000000200)={{0x81, 0x1ff, 0x9, 0x1985d425}, &(0x7f00000001c0)={{0x4, 0x56ce7fbc, 0xfffffff8}}}}, 0x81, &(0x7f0000000380)="4cd33e21a8e2a8dd0f5e95a99f8ffb3018a455a4f8135241f5f0836753d54f195a9293f70005dd6c3d4766e5960e4cf6ed4ae77d49793f33c965e4249a22a179d09f30307533749e06963b701eee60460ff697c54ed296e148fde1c10d3b007c3c9efe0782563a2c1d5c2fbdaf1927cf245db4853a5a6d50cc9df80f4278771d52dcd6e52b8c0ef08e35c7e2738729d86d6a7eefa03e6c426458d22c247f8f3038da6ba45346a482c1a43233619c104bfd2e69f1dbbc274713b60c603942e67e53738b1194a91cec27", 0x7}}, 0x2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r5) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc78af42425c0bce8fb50427aba5e41b14000000", @ANYRES16=r6, @ANYBLOB="00002bbd70000000000005000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) read$eventfd(r1, &(0x7f0000000000), 0x8) (async) 05:33:10 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0xe7}}) 05:33:10 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x300}}) 05:33:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28000804}, 0x4000) (rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB], 0x1c}}, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4890) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c87dd2bc6cdc27d30000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fddbdf250100000014000700fe80000000000000000000000000000f0800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 05:33:10 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r0, 0x1) 05:33:10 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x2, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:10 executing program 5: r0 = eventfd2(0xfffffffc, 0x80000) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async, rerun: 32) read$eventfd(r0, &(0x7f0000000040), 0xffffff4a) (async, rerun: 32) r1 = eventfd(0x3f) write$eventfd(r1, &(0x7f0000000000)=0x7, 0x8) 05:33:10 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x500}}) 05:33:10 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) eventfd2(0x101, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x2, 0x40002) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) (async, rerun: 32) r3 = syz_open_dev$video(&(0x7f0000000180), 0x6, 0x90000) (async, rerun: 32) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000000bc0)={&(0x7f00000002c0)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/26, 0x1a}, {&(0x7f0000000980)=""/115, 0x73}, {&(0x7f0000000a40)}], 0x8, &(0x7f0000000b80)=""/16, 0x10}, 0x2000) (async) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x7, 0x9, 0x4, {0x8, @win={{0x0, 0x6, 0x5, 0xfc0}, 0x0, 0x0, &(0x7f0000000240)={{0x3, 0x8, 0xfffffffd, 0x401}, &(0x7f0000000200)={{0x81, 0x1ff, 0x9, 0x1985d425}, &(0x7f00000001c0)={{0x4, 0x56ce7fbc, 0xfffffff8}}}}, 0x81, &(0x7f0000000380)="4cd33e21a8e2a8dd0f5e95a99f8ffb3018a455a4f8135241f5f0836753d54f195a9293f70005dd6c3d4766e5960e4cf6ed4ae77d49793f33c965e4249a22a179d09f30307533749e06963b701eee60460ff697c54ed296e148fde1c10d3b007c3c9efe0782563a2c1d5c2fbdaf1927cf245db4853a5a6d50cc9df80f4278771d52dcd6e52b8c0ef08e35c7e2738729d86d6a7eefa03e6c426458d22c247f8f3038da6ba45346a482c1a43233619c104bfd2e69f1dbbc274713b60c603942e67e53738b1194a91cec27", 0x7}}, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r5) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc78af42425c0bce8fb50427aba5e41b14000000", @ANYRES16=r6, @ANYBLOB="00002bbd70000000000005000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) (async, rerun: 32) write$vga_arbiter(r1, 0x0, 0x0) (async, rerun: 32) read$eventfd(r1, &(0x7f0000000000), 0x8) 05:33:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28000804}, 0x4000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB], 0x1c}}, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4890) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c87dd2bc6cdc27d30000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fddbdf250100000014000700fe80000000000000000000000000000f0800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28000804}, 0x4000) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB], 0x1c}}, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4890) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c87dd2bc6cdc27d30000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fddbdf250100000014000700fe80000000000000000000000000000f0800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) (async) 05:33:10 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x600}}) 05:33:10 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0xd0, "c4478b96cdc31dff5d0a095dac669fa5c7d6afc863f7b7549681dcc11a620cca", 0x3, 0x1, 0x3, 0x8, 0x2, 0x8}) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = eventfd(0x9) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000000c0)={0x4, r1}) 05:33:10 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x10, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000b129f6beb8b26155f11dd5969df957e9af833c952b3f084a42f7c509e2a4ea60bb9593d602e2c7e2be48baa50619961c698430439a4f6a3300278e9aa6b8a8dda7f9d8a3362e9f50e282a1be9caf35171da4908f4e6d4f71fb074f5028a71e9a3dad0f3d3cf65930d92dbad739fb034719d6c33e9923e20db76b31295c2b5922426dc52e85892aae88de74cec7439c4bf2d757f9aa025eb3178f9c482a4403dd1f31d31bf3dba081488f15c5c01ead5fe73ff5588185f73ac74e85889a97e93f3343d3375937fec6a9293aeec71aa945b81f2a69ed2a555bc2fa9351d7a1f5fef2be5ab816d74a2acb12ee0579", @ANYRES16=r1, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8881) 05:33:10 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x700}}) 05:33:10 executing program 0: r0 = eventfd2(0x0, 0x80000) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000740), 0x1) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) io_setup(0x7, &(0x7f0000000040)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x9, 0x48000000, 0x100, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0xc}, 0x48) io_pgetevents(r1, 0x7, 0x2, &(0x7f0000000580)=[{}, {}], &(0x7f0000000700), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = io_uring_setup(0x3bde, &(0x7f00000002c0)={0x0, 0x2123, 0x0, 0x1, 0x153}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000340)=r5, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x20000081) io_submit(r1, 0x4, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000140)="5c33a7a83514d4bcfeb21452520f5b9b8afb53341e2273b87493c2ba380df3423922079a3aa3e62864cd18a96516c7e26e0757756b109022df41f2e1c17dd76f4314e3d370947ed118daf9b44f55ce39ee72ba64c1b5a4129bb46804097f5c87ea3bb3f20892897c31728c73c58e721d941240f3ff9a1f8023940c55521a22bf703f5f92b236ba010ee0ffac8ab93266959617d696ee6217fea972be86f8b481d9352494cde4b953dd602b73c202e075c844087df9c7d92248482f7ab3662a08769d7768974bc122fb83787be0792948d45f", 0xd2, 0x9, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000600)="239010d61b5b99ac30b997c3de67bf4c61aedc4003754ef5c902f64e8554707aa1887aa13feca63efded84829bf5e6780945fd23c6892a132aeaeeedcc110e32626cff4755cb805b7ce9ebf4ea3f6c8987fc0a97e304df810dec3429e1d357469a3d359eab30ada7c6b20b16d0753957add3b8eddb0fde1f2ef23c82ad3fa7f76a", 0x81, 0x84a5, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000000400)="a986f6cb3412d044292775b1a0bc57c602a8ce317d97b56447dfe56e38173813b8dc5b50", 0x24, 0x8ac5, 0x0, 0x0, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x9, r6, &(0x7f0000000480)="f14c83be56fcd1043d8504a2efbdc92509b38a47aa5a842f4143b565e333b9f5433628b0c9e838fbb63b893e79a4aa488d423a159265a14b6e21f427080ae7efcb7f08860d7f32748ff91af7ea9ca3634561c13677e32d25873dd7c24ee68cece53ebea0ecc28c3a4246fabf954648466b191c4f01a473dd0400ebff2ebb60b4d71d6afb1321f108334c1e59c09ed4509e986d", 0x93, 0x3fe, 0x0, 0x2, r0}]) write$eventfd(r0, &(0x7f0000000000)=0x800, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80482, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 05:33:11 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r0, 0x1) 05:33:11 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:11 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0xd0, "c4478b96cdc31dff5d0a095dac669fa5c7d6afc863f7b7549681dcc11a620cca", 0x3, 0x1, 0x3, 0x8, 0x2, 0x8}) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = eventfd(0x9) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000000c0)={0x4, r1}) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0xd0, "c4478b96cdc31dff5d0a095dac669fa5c7d6afc863f7b7549681dcc11a620cca", 0x3, 0x1, 0x3, 0x8, 0x2, 0x8}) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) eventfd(0x9) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000000c0)={0x4, r1}) (async) 05:33:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000b129f6beb8b26155f11dd5969df957e9af833c952b3f084a42f7c509e2a4ea60bb9593d602e2c7e2be48baa50619961c698430439a4f6a3300278e9aa6b8a8dda7f9d8a3362e9f50e282a1be9caf35171da4908f4e6d4f71fb074f5028a71e9a3dad0f3d3cf65930d92dbad739fb034719d6c33e9923e20db76b31295c2b5922426dc52e85892aae88de74cec7439c4bf2d757f9aa025eb3178f9c482a4403dd1f31d31bf3dba081488f15c5c01ead5fe73ff5588185f73ac74e85889a97e93f3343d3375937fec6a9293aeec71aa945b81f2a69ed2a555bc2fa9351d7a1f5fef2be5ab816d74a2acb12ee0579", @ANYRES16=r1, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8881) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000b129f6beb8b26155f11dd5969df957e9af833c952b3f084a42f7c509e2a4ea60bb9593d602e2c7e2be48baa50619961c698430439a4f6a3300278e9aa6b8a8dda7f9d8a3362e9f50e282a1be9caf35171da4908f4e6d4f71fb074f5028a71e9a3dad0f3d3cf65930d92dbad739fb034719d6c33e9923e20db76b31295c2b5922426dc52e85892aae88de74cec7439c4bf2d757f9aa025eb3178f9c482a4403dd1f31d31bf3dba081488f15c5c01ead5fe73ff5588185f73ac74e85889a97e93f3343d3375937fec6a9293aeec71aa945b81f2a69ed2a555bc2fa9351d7a1f5fef2be5ab816d74a2acb12ee0579", @ANYRES16=r1, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8881) (async) 05:33:11 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0xe7ff}}) 05:33:11 executing program 0: r0 = eventfd2(0x0, 0x80000) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000740), 0x1) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) io_setup(0x7, &(0x7f0000000040)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x9, 0x48000000, 0x100, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0xc}, 0x48) io_pgetevents(r1, 0x7, 0x2, &(0x7f0000000580)=[{}, {}], &(0x7f0000000700), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = io_uring_setup(0x3bde, &(0x7f00000002c0)={0x0, 0x2123, 0x0, 0x1, 0x153}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000340)=r5, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x20000081) io_submit(r1, 0x4, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000140)="5c33a7a83514d4bcfeb21452520f5b9b8afb53341e2273b87493c2ba380df3423922079a3aa3e62864cd18a96516c7e26e0757756b109022df41f2e1c17dd76f4314e3d370947ed118daf9b44f55ce39ee72ba64c1b5a4129bb46804097f5c87ea3bb3f20892897c31728c73c58e721d941240f3ff9a1f8023940c55521a22bf703f5f92b236ba010ee0ffac8ab93266959617d696ee6217fea972be86f8b481d9352494cde4b953dd602b73c202e075c844087df9c7d92248482f7ab3662a08769d7768974bc122fb83787be0792948d45f", 0xd2, 0x9, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000600)="239010d61b5b99ac30b997c3de67bf4c61aedc4003754ef5c902f64e8554707aa1887aa13feca63efded84829bf5e6780945fd23c6892a132aeaeeedcc110e32626cff4755cb805b7ce9ebf4ea3f6c8987fc0a97e304df810dec3429e1d357469a3d359eab30ada7c6b20b16d0753957add3b8eddb0fde1f2ef23c82ad3fa7f76a", 0x81, 0x84a5, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000000400)="a986f6cb3412d044292775b1a0bc57c602a8ce317d97b56447dfe56e38173813b8dc5b50", 0x24, 0x8ac5, 0x0, 0x0, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x9, r6, &(0x7f0000000480)="f14c83be56fcd1043d8504a2efbdc92509b38a47aa5a842f4143b565e333b9f5433628b0c9e838fbb63b893e79a4aa488d423a159265a14b6e21f427080ae7efcb7f08860d7f32748ff91af7ea9ca3634561c13677e32d25873dd7c24ee68cece53ebea0ecc28c3a4246fabf954648466b191c4f01a473dd0400ebff2ebb60b4d71d6afb1321f108334c1e59c09ed4509e986d", 0x93, 0x3fe, 0x0, 0x2, r0}]) write$eventfd(r0, &(0x7f0000000000)=0x800, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80482, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) eventfd2(0x0, 0x80000) (async) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000740), 0x1) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) io_setup(0x7, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x9, 0x48000000, 0x100, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0xc}, 0x48) (async) io_pgetevents(r1, 0x7, 0x2, &(0x7f0000000580)=[{}, {}], &(0x7f0000000700), 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async) io_uring_setup(0x3bde, &(0x7f00000002c0)={0x0, 0x2123, 0x0, 0x1, 0x153}) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r5, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000340)=r5, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x20000081) (async) io_submit(r1, 0x4, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000140)="5c33a7a83514d4bcfeb21452520f5b9b8afb53341e2273b87493c2ba380df3423922079a3aa3e62864cd18a96516c7e26e0757756b109022df41f2e1c17dd76f4314e3d370947ed118daf9b44f55ce39ee72ba64c1b5a4129bb46804097f5c87ea3bb3f20892897c31728c73c58e721d941240f3ff9a1f8023940c55521a22bf703f5f92b236ba010ee0ffac8ab93266959617d696ee6217fea972be86f8b481d9352494cde4b953dd602b73c202e075c844087df9c7d92248482f7ab3662a08769d7768974bc122fb83787be0792948d45f", 0xd2, 0x9, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000600)="239010d61b5b99ac30b997c3de67bf4c61aedc4003754ef5c902f64e8554707aa1887aa13feca63efded84829bf5e6780945fd23c6892a132aeaeeedcc110e32626cff4755cb805b7ce9ebf4ea3f6c8987fc0a97e304df810dec3429e1d357469a3d359eab30ada7c6b20b16d0753957add3b8eddb0fde1f2ef23c82ad3fa7f76a", 0x81, 0x84a5, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000000400)="a986f6cb3412d044292775b1a0bc57c602a8ce317d97b56447dfe56e38173813b8dc5b50", 0x24, 0x8ac5, 0x0, 0x0, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x9, r6, &(0x7f0000000480)="f14c83be56fcd1043d8504a2efbdc92509b38a47aa5a842f4143b565e333b9f5433628b0c9e838fbb63b893e79a4aa488d423a159265a14b6e21f427080ae7efcb7f08860d7f32748ff91af7ea9ca3634561c13677e32d25873dd7c24ee68cece53ebea0ecc28c3a4246fabf954648466b191c4f01a473dd0400ebff2ebb60b4d71d6afb1321f108334c1e59c09ed4509e986d", 0x93, 0x3fe, 0x0, 0x2, r0}]) (async) write$eventfd(r0, &(0x7f0000000000)=0x800, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80482, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) 05:33:11 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0xfdfd}}) 05:33:11 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5421, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000b129f6beb8b26155f11dd5969df957e9af833c952b3f084a42f7c509e2a4ea60bb9593d602e2c7e2be48baa50619961c698430439a4f6a3300278e9aa6b8a8dda7f9d8a3362e9f50e282a1be9caf35171da4908f4e6d4f71fb074f5028a71e9a3dad0f3d3cf65930d92dbad739fb034719d6c33e9923e20db76b31295c2b5922426dc52e85892aae88de74cec7439c4bf2d757f9aa025eb3178f9c482a4403dd1f31d31bf3dba081488f15c5c01ead5fe73ff5588185f73ac74e85889a97e93f3343d3375937fec6a9293aeec71aa945b81f2a69ed2a555bc2fa9351d7a1f5fef2be5ab816d74a2acb12ee0579", @ANYRES16=r1, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8881) 05:33:11 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0xd0, "c4478b96cdc31dff5d0a095dac669fa5c7d6afc863f7b7549681dcc11a620cca", 0x3, 0x1, 0x3, 0x8, 0x2, 0x8}) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async, rerun: 32) r1 = eventfd(0x9) (rerun: 32) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000000c0)={0x4, r1}) 05:33:11 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0xff00}}) 05:33:11 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000180)=""/204, &(0x7f0000000280)=""/66, &(0x7f00000003c0)=""/178, 0xd000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:33:12 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r0, 0x1) 05:33:12 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5450, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:12 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000180)=""/204, &(0x7f0000000280)=""/66, &(0x7f00000003c0)=""/178, 0xd000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:33:12 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0xffe7}}) 05:33:12 executing program 0: r0 = eventfd2(0x0, 0x80000) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000740), 0x1) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) io_setup(0x7, &(0x7f0000000040)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x9, 0x48000000, 0x100, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0xc}, 0x48) (async) io_pgetevents(r1, 0x7, 0x2, &(0x7f0000000580)=[{}, {}], &(0x7f0000000700), 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = io_uring_setup(0x3bde, &(0x7f00000002c0)={0x0, 0x2123, 0x0, 0x1, 0x153}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000340)=r5, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x20000081) (async) io_submit(r1, 0x4, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000140)="5c33a7a83514d4bcfeb21452520f5b9b8afb53341e2273b87493c2ba380df3423922079a3aa3e62864cd18a96516c7e26e0757756b109022df41f2e1c17dd76f4314e3d370947ed118daf9b44f55ce39ee72ba64c1b5a4129bb46804097f5c87ea3bb3f20892897c31728c73c58e721d941240f3ff9a1f8023940c55521a22bf703f5f92b236ba010ee0ffac8ab93266959617d696ee6217fea972be86f8b481d9352494cde4b953dd602b73c202e075c844087df9c7d92248482f7ab3662a08769d7768974bc122fb83787be0792948d45f", 0xd2, 0x9, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000600)="239010d61b5b99ac30b997c3de67bf4c61aedc4003754ef5c902f64e8554707aa1887aa13feca63efded84829bf5e6780945fd23c6892a132aeaeeedcc110e32626cff4755cb805b7ce9ebf4ea3f6c8987fc0a97e304df810dec3429e1d357469a3d359eab30ada7c6b20b16d0753957add3b8eddb0fde1f2ef23c82ad3fa7f76a", 0x81, 0x84a5, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000000400)="a986f6cb3412d044292775b1a0bc57c602a8ce317d97b56447dfe56e38173813b8dc5b50", 0x24, 0x8ac5, 0x0, 0x0, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x9, r6, &(0x7f0000000480)="f14c83be56fcd1043d8504a2efbdc92509b38a47aa5a842f4143b565e333b9f5433628b0c9e838fbb63b893e79a4aa488d423a159265a14b6e21f427080ae7efcb7f08860d7f32748ff91af7ea9ca3634561c13677e32d25873dd7c24ee68cece53ebea0ecc28c3a4246fabf954648466b191c4f01a473dd0400ebff2ebb60b4d71d6afb1321f108334c1e59c09ed4509e986d", 0x93, 0x3fe, 0x0, 0x2, r0}]) (async) write$eventfd(r0, &(0x7f0000000000)=0x800, 0x8) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80482, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 05:33:12 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5451, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:12 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x1000000}}) 05:33:12 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000180)=""/204, &(0x7f0000000280)=""/66, &(0x7f00000003c0)=""/178, 0xd000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:33:12 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000000c0)={0x2}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r2 = eventfd(0x7fffffff) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x4, r2, 0x1}) 05:33:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x0, 0x40000001}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4080) 05:33:12 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x2000000}}) 05:33:12 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = eventfd2(0xbf2, 0x1) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0xde6b, 0x5, r0}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x9, 0x0) 05:33:12 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x3000000}}) 05:33:12 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000000c0)={0x2}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r2 = eventfd(0x7fffffff) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x4, r2, 0x1}) eventfd2(0x7fe000, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000000c0)={0x2}) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) eventfd(0x7fffffff) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x4, r2, 0x1}) (async) 05:33:12 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x0, 0x40000001}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x0, 0x40000001}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4080) (async) 05:33:12 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x0, 0x2, 0x5, 0x7fffffffffffffff}) 05:33:12 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = eventfd2(0xbf2, 0x1) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0xde6b, 0x5, r0}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) eventfd2(0x9, 0x0) 05:33:12 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x4000000}}) 05:33:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x0, 0x40000001}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4080) 05:33:13 executing program 0: r0 = eventfd2(0x0, 0x0) (async) r1 = eventfd2(0xbf2, 0x1) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0xde6b, 0x5, r0}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x9, 0x0) 05:33:13 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5460, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:13 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x0, 0x2, 0x5, 0x7fffffffffffffff}) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x0, 0x2, 0x5, 0x7fffffffffffffff}) (async) 05:33:13 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x5000000}}) 05:33:13 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000000c0)={0x2}) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) r2 = eventfd(0x7fffffff) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x4, r2, 0x1}) 05:33:13 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x8933, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:13 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x0, 0x2, 0x5, 0x7fffffffffffffff}) 05:33:13 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x4410) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 05:33:13 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x6000000}}) 05:33:13 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa080, 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000040)={0x41, 0x30, &(0x7f00000000c0)="722eeaefe7aa68c36f33e5aa46e68674bfe7338795b163d7bbaee027a1ca8c57e0b82da0d9d0304567636497b505154a79b65b29c8de0747236fa8711a07fa5a1c3df5b209cf222ba242c24cd249c9e518af1cb840e592d90a80ebb74fc175150facaa0ecc3844fc2db8095d9b9e8b914719db387098ae4f1f2aa6ed6470bd7c0fa1e4d362a879c9e4d3788174dddcf5aef8cee0be19fadbaac349a187676144c5962b95e0de837d52b67396b50f4886becffbca6e77684fdaefbbf116a4670a2ba0c2504fa846fa307491cae5c593beb6bc177afd", {0x10000, 0x4, 0x3447504d, 0x7, 0x5, 0x7, 0x3, 0x72c}}) write$vga_arbiter(r1, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 05:33:13 executing program 3: r0 = eventfd2(0x1000, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:33:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 05:33:13 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x400448c9, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:13 executing program 0: r0 = eventfd2(0x0, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$batadv(0x0, r2) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x4410) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:13 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x7000000}}) 05:33:13 executing program 3: r0 = eventfd2(0x1000, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:33:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 05:33:13 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x400448dd, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:13 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0xe7ffffff}}) 05:33:13 executing program 3: r0 = eventfd2(0x1000, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) 05:33:13 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004808) 05:33:14 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa080, 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000040)={0x41, 0x30, &(0x7f00000000c0)="722eeaefe7aa68c36f33e5aa46e68674bfe7338795b163d7bbaee027a1ca8c57e0b82da0d9d0304567636497b505154a79b65b29c8de0747236fa8711a07fa5a1c3df5b209cf222ba242c24cd249c9e518af1cb840e592d90a80ebb74fc175150facaa0ecc3844fc2db8095d9b9e8b914719db387098ae4f1f2aa6ed6470bd7c0fa1e4d362a879c9e4d3788174dddcf5aef8cee0be19fadbaac349a187676144c5962b95e0de837d52b67396b50f4886becffbca6e77684fdaefbbf116a4670a2ba0c2504fa846fa307491cae5c593beb6bc177afd", {0x10000, 0x4, 0x3447504d, 0x7, 0x5, 0x7, 0x3, 0x72c}}) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) read$eventfd(r1, &(0x7f0000000000), 0x8) 05:33:14 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0xfdfdffff}}) 05:33:14 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x400454ca, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:14 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x200000000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x3000, &(0x7f0000000000), 0x1, r2}) 05:33:14 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004808) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004808) (async) 05:33:14 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x4410) (async, rerun: 32) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (rerun: 32) 05:33:14 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0xff000000}}) 05:33:14 executing program 0: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:14 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x200000000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x3000, &(0x7f0000000000), 0x1, r2}) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, 0x0) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x200000000) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x3000, &(0x7f0000000000), 0x1, r2}) (async) 05:33:14 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x40049409, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:14 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004808) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004808) (async) 05:33:14 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0xfffffdfd}}) 05:33:14 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa080, 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000040)={0x41, 0x30, &(0x7f00000000c0)="722eeaefe7aa68c36f33e5aa46e68674bfe7338795b163d7bbaee027a1ca8c57e0b82da0d9d0304567636497b505154a79b65b29c8de0747236fa8711a07fa5a1c3df5b209cf222ba242c24cd249c9e518af1cb840e592d90a80ebb74fc175150facaa0ecc3844fc2db8095d9b9e8b914719db387098ae4f1f2aa6ed6470bd7c0fa1e4d362a879c9e4d3788174dddcf5aef8cee0be19fadbaac349a187676144c5962b95e0de837d52b67396b50f4886becffbca6e77684fdaefbbf116a4670a2ba0c2504fa846fa307491cae5c593beb6bc177afd", {0x10000, 0x4, 0x3447504d, 0x7, 0x5, 0x7, 0x3, 0x72c}}) write$vga_arbiter(r1, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 05:33:14 executing program 0: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:14 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x40086602, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:14 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0xffffffe7}}) 05:33:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x40044) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:33:14 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x200000000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x3000, &(0x7f0000000000), 0x1, r2}) eventfd2(0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, 0x0) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x200000000) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x3000, &(0x7f0000000000), 0x1, r2}) (async) 05:33:14 executing program 0: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:14 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0xffffffff}}) 05:33:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x40044) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:33:14 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x401c5820, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:14 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x315900, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000000066cb6e6ee17a8e3e63a3e3014f9dc4bc02afcb64a60edfa696aca1e263855e4140f063e04a4e8f9538552ec3e6de34dce1b6d71df45f8c8be03a438fa363c71e8931b724bb95cd9ef740a4eed02764d5c9d903d72f8089ba8dac597d0361b0048df3eabeebe6c20d433644455e78b6016fba663d82c17fc2b1", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf250e0000000a0009002bdcd23bf9db000008002b0008000000"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x48010) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz1\x00') r2 = eventfd2(0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)=@overlay={0x40, 0x4, 0x4, 0x2, 0x6, {r5, r6/1000+60000}, {0x2, 0x1, 0x7, 0x0, 0x6, 0x1, "6fbf9c54"}, 0x9, 0x3, {}, 0x3, 0x0, r7}) write$vga_arbiter(r3, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x3, r3, 0x1}) read$eventfd(r2, &(0x7f0000000100), 0xfffffffffffffdef) read$eventfd(r2, &(0x7f0000000000), 0x8) 05:33:14 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2}) 05:33:15 executing program 3: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x90) r0 = eventfd2(0x10, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0xc0) 05:33:15 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x4020940d, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x40044) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:33:15 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x2}}) 05:33:15 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)) io_setup(0x101, &(0x7f00000000c0)=0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) io_submit(r3, 0x3, &(0x7f0000000280)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xc4, r5, &(0x7f0000000180)="fa88d5a98606258d80107b69141608d535d59d7cc23c100c36a1b22508adac7d1e", 0x0, 0x35f9, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6f19, 0xffffffffffffffff, &(0x7f0000000200)="58ecb97af1548e8c5e241ba4b57dfea7f5bf09acbc9b549183931d", 0x0, 0x4, 0x0, 0x2, r0}]) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x3000, &(0x7f0000000000), 0x0, r6, 0x4}) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:33:15 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x3}}) 05:33:15 executing program 3: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x90) (async) r0 = eventfd2(0x10, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0xc0) 05:33:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x40044) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x11}]}, 0x1c}}, 0x0) 05:33:15 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x80086301, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x80086601, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x315900, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000000066cb6e6ee17a8e3e63a3e3014f9dc4bc02afcb64a60edfa696aca1e263855e4140f063e04a4e8f9538552ec3e6de34dce1b6d71df45f8c8be03a438fa363c71e8931b724bb95cd9ef740a4eed02764d5c9d903d72f8089ba8dac597d0361b0048df3eabeebe6c20d433644455e78b6016fba663d82c17fc2b1", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf250e0000000a0009002bdcd23bf9db000008002b0008000000"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x48010) (async) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz1\x00') r2 = eventfd2(0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)=@overlay={0x40, 0x4, 0x4, 0x2, 0x6, {r5, r6/1000+60000}, {0x2, 0x1, 0x7, 0x0, 0x6, 0x1, "6fbf9c54"}, 0x9, 0x3, {}, 0x3, 0x0, r7}) (async) write$vga_arbiter(r3, 0x0, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x3, r3, 0x1}) (async) read$eventfd(r2, &(0x7f0000000100), 0xfffffffffffffdef) (async) read$eventfd(r2, &(0x7f0000000000), 0x8) 05:33:15 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x4}}) 05:33:15 executing program 3: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x90) r0 = eventfd2(0x10, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0xc0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x90) (async) eventfd2(0x10, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x7ffffffff000) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0xc0) (async) 05:33:15 executing program 4: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5421, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 3: eventfd2(0x4, 0x80000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x402080, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x10, 0x8b, 0x2}) r1 = eventfd(0x100) read$eventfd(r1, &(0x7f0000000100), 0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x24003, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) write$eventfd(r4, &(0x7f0000000180)=0x31b, 0x8) write$vga_arbiter(r3, 0x0, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000140)='syz0\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r7, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r6, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x8928, 0x80, r4}) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000000c0)={0x7, 0x7, 0x6ce}) 05:33:15 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x5}}) 05:33:15 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)) io_setup(0x101, &(0x7f00000000c0)=0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) io_submit(r3, 0x3, &(0x7f0000000280)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xc4, r5, &(0x7f0000000180)="fa88d5a98606258d80107b69141608d535d59d7cc23c100c36a1b22508adac7d1e", 0x0, 0x35f9, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6f19, 0xffffffffffffffff, &(0x7f0000000200)="58ecb97af1548e8c5e241ba4b57dfea7f5bf09acbc9b549183931d", 0x0, 0x4, 0x0, 0x2, r0}]) (async) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x3000, &(0x7f0000000000), 0x0, r6, 0x4}) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:33:15 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x4}}) 05:33:15 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x801c581f, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x315900, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000000066cb6e6ee17a8e3e63a3e3014f9dc4bc02afcb64a60edfa696aca1e263855e4140f063e04a4e8f9538552ec3e6de34dce1b6d71df45f8c8be03a438fa363c71e8931b724bb95cd9ef740a4eed02764d5c9d903d72f8089ba8dac597d0361b0048df3eabeebe6c20d433644455e78b6016fba663d82c17fc2b1", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf250e0000000a0009002bdcd23bf9db000008002b0008000000"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x48010) (async) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz1\x00') (async) r2 = eventfd2(0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async, rerun: 32) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)=@overlay={0x40, 0x4, 0x4, 0x2, 0x6, {r5, r6/1000+60000}, {0x2, 0x1, 0x7, 0x0, 0x6, 0x1, "6fbf9c54"}, 0x9, 0x3, {}, 0x3, 0x0, r7}) (async) write$vga_arbiter(r3, 0x0, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x3, r3, 0x1}) (async) read$eventfd(r2, &(0x7f0000000100), 0xfffffffffffffdef) read$eventfd(r2, &(0x7f0000000000), 0x8) 05:33:15 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x6}}) 05:33:15 executing program 4: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc0045878, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x7}}) 05:33:15 executing program 3: eventfd2(0x4, 0x80000) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x402080, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x10, 0x8b, 0x2}) (async) r1 = eventfd(0x100) read$eventfd(r1, &(0x7f0000000100), 0x8) (async, rerun: 64) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x24003, 0x0) (async, rerun: 64) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) (async) write$eventfd(r4, &(0x7f0000000180)=0x31b, 0x8) (async) write$vga_arbiter(r3, 0x0, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000140)='syz0\x00') (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r7, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r6, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x8928, 0x80, r4}) (async) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000000c0)={0x7, 0x7, 0x6ce}) 05:33:15 executing program 0: r0 = eventfd2(0x3ffe, 0x800) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc0045878, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 4: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)) io_setup(0x101, &(0x7f00000000c0)=0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) io_submit(r3, 0x3, &(0x7f0000000280)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xc4, r5, &(0x7f0000000180)="fa88d5a98606258d80107b69141608d535d59d7cc23c100c36a1b22508adac7d1e", 0x0, 0x35f9, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6f19, 0xffffffffffffffff, &(0x7f0000000200)="58ecb97af1548e8c5e241ba4b57dfea7f5bf09acbc9b549183931d", 0x0, 0x4, 0x0, 0x2, r0}]) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x3000, &(0x7f0000000000), 0x0, r6, 0x4}) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) io_setup(0x101, &(0x7f0000000100)) (async) io_setup(0x101, &(0x7f00000000c0)) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) io_submit(r3, 0x3, &(0x7f0000000280)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xc4, r5, &(0x7f0000000180)="fa88d5a98606258d80107b69141608d535d59d7cc23c100c36a1b22508adac7d1e", 0x0, 0x35f9, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6f19, 0xffffffffffffffff, &(0x7f0000000200)="58ecb97af1548e8c5e241ba4b57dfea7f5bf09acbc9b549183931d", 0x0, 0x4, 0x0, 0x2, r0}]) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r6, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x3000, &(0x7f0000000000), 0x0, r6, 0x4}) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) 05:33:15 executing program 4: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 0: r0 = eventfd2(0x3ffe, 0x800) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0xe7}}) 05:33:15 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc0189436, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 3: eventfd2(0x4, 0x80000) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x402080, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x10, 0x8b, 0x2}) r1 = eventfd(0x100) read$eventfd(r1, &(0x7f0000000100), 0x8) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x24003, 0x0) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) (async) write$eventfd(r4, &(0x7f0000000180)=0x31b, 0x8) (async) write$vga_arbiter(r3, 0x0, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000140)='syz0\x00') (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r7, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r6, &(0x7f0000000140)}, 0x0, 0x0]) (async) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x8928, 0x80, r4}) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000000c0)={0x7, 0x7, 0x6ce}) 05:33:15 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc020660b, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 3: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc0045878, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x300}}) 05:33:15 executing program 0: r0 = eventfd2(0x3ffe, 0x800) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:15 executing program 4: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:15 executing program 4: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xffffffff, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000140)={{0x0, @addr=0x8000}, "835d0501a3450490199fe00a9e8a50ec427db839dbd3b9c283dc91067d0082da", 0x1}) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) eventfd2(0x80000001, 0x1) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:33:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x500}}) 05:33:16 executing program 0: r0 = eventfd2(0x0, 0x80000) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000740), 0x1) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) io_setup(0x7, &(0x7f0000000040)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x9, 0x48000000, 0x100, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0xc}, 0x48) io_pgetevents(r1, 0x7, 0x2, &(0x7f0000000580)=[{}, {}], &(0x7f0000000700), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = io_uring_setup(0x3bde, &(0x7f00000002c0)={0x0, 0x2123, 0x0, 0x1, 0x153}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000340)=r5, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x20000081) io_submit(r1, 0x4, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000140)="5c33a7a83514d4bcfeb21452520f5b9b8afb53341e2273b87493c2ba380df3423922079a3aa3e62864cd18a96516c7e26e0757756b109022df41f2e1c17dd76f4314e3d370947ed118daf9b44f55ce39ee72ba64c1b5a4129bb46804097f5c87ea3bb3f20892897c31728c73c58e721d941240f3ff9a1f8023940c55521a22bf703f5f92b236ba010ee0ffac8ab93266959617d696ee6217fea972be86f8b481d9352494cde4b953dd602b73c202e075c844087df9c7d92248482f7ab3662a08769d7768974bc122fb83787be0792948d45f", 0xd2, 0x9, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000600)="239010d61b5b99ac30b997c3de67bf4c61aedc4003754ef5c902f64e8554707aa1887aa13feca63efded84829bf5e6780945fd23c6892a132aeaeeedcc110e32626cff4755cb805b7ce9ebf4ea3f6c8987fc0a97e304df810dec3429e1d357469a3d359eab30ada7c6b20b16d0753957add3b8eddb0fde1f2ef23c82ad3fa7f76a", 0x81, 0x84a5, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000000400)="a986f6cb3412d044292775b1a0bc57c602a8ce317d97b56447dfe56e38173813b8dc5b50", 0x24, 0x8ac5, 0x0, 0x0, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x9, r6, &(0x7f0000000480)="f14c83be56fcd1043d8504a2efbdc92509b38a47aa5a842f4143b565e333b9f5433628b0c9e838fbb63b893e79a4aa488d423a159265a14b6e21f427080ae7efcb7f08860d7f32748ff91af7ea9ca3634561c13677e32d25873dd7c24ee68cece53ebea0ecc28c3a4246fabf954648466b191c4f01a473dd0400ebff2ebb60b4d71d6afb1321f108334c1e59c09ed4509e986d", 0x93, 0x3fe, 0x0, 0x2, r0}]) write$eventfd(r0, &(0x7f0000000000)=0x800, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80482, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 05:33:16 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086202, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:16 executing program 3: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x10, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:16 executing program 4: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 4: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 3: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x10, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:16 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086203, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x600}}) 05:33:16 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086205, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:16 executing program 4: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xffffffff, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000140)={{0x0, @addr=0x8000}, "835d0501a3450490199fe00a9e8a50ec427db839dbd3b9c283dc91067d0082da", 0x1}) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) socket$l2tp(0x2, 0x2, 0x73) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) eventfd2(0x80000001, 0x1) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:33:16 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086207, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:16 executing program 0: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x10, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:16 executing program 3: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x10, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x700}}) 05:33:16 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086208, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:16 executing program 4: eventfd2(0x0, 0x800) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 5: r0 = eventfd2(0x7fe000, 0x0) (async, rerun: 32) r1 = syz_open_dev$video(&(0x7f0000000040), 0xffffffff, 0x0) (rerun: 32) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000140)={{0x0, @addr=0x8000}, "835d0501a3450490199fe00a9e8a50ec427db839dbd3b9c283dc91067d0082da", 0x1}) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) socket$l2tp(0x2, 0x2, 0x73) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async, rerun: 64) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) (async, rerun: 64) eventfd2(0x80000001, 0x1) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:33:16 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc108621c, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:16 executing program 4: eventfd2(0x0, 0x800) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 3: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0xe7ff}}) 05:33:16 executing program 5: r0 = eventfd2(0x7, 0x80800) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r1, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r2 = eventfd(0x2b46) io_submit(r1, 0x3, &(0x7f0000001280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x3ff, 0xffffffffffffffff, &(0x7f00000000c0)="9a37334139430d7e2b04cbe9ee8a3c00458ed7876a048b440d5d577fac1aad743c35e775cc2cf79ceb39eccc5818b37a408fabdf14c4f68df6e47b117c4e13a5c9d4f51d9848f9355454b2cf8e1a9600082b22d4f5d628a01d866515bc4d3e4c289451efd0b539235f4cea057ccbfeeb8ef6da466690e14b5c04f523368d58654726b8c920890a35498a8f766729ac89aff65536d4ad3df799e57f09d763da26a895e2fab96707d1657145e9bd66ab643c67103db65dc08390d8adcce4adabb94aa6c11395514bc40b4e4cd65dbe6cd4f2c2d9ff20b30d1742066e619cc65d7959820a7c96327e91dc84992681472b2978a4d05896c6cf1c426d371ac35ee376defde504f2ff87430acee83c741f29681e4957211b51ea357f7a10bc92c42b46c86e7fda9e330bb7fd0a568ab2d541408c7e024b6b0c3396e47dc82db7d5cfc56a7a284d2d5ce0f765e6744132d6bbcea9aeee626531955735725c04726b98e26d6b79cade820ab7dbb37da1f1ec6a7cb3e2d976974fe2fb970c782a20f6b56d9b2a55fcce673c737df3649050f7e1042986309416fbe7a71107f75a7a783ba79b43cd8cacd7a4437e09535d27f488f103cbf490f3865fcdb80bbd0216eddd214e14053a86a236294dbe0daf5d3e4b60cb08aadc31995e49629b209aca8e23cefbf5052c4bb42f421587feab4889ff14019161e9a748cc0b5825986030ce1b92ce6cf1d87b2c77fc12b7e8863edfa90a5786e8decb6e7505d403a2888d0e521e1132ff5af51bbecdfdbb1fb54bc70c0357b8f03256884bcc6a35624be2dc63e43430afcc9a9af16c6a242448dfba065fd5d2eb02d9ff7a275726fa4c1815055505ddf028a573b0c05c005c4b8eae6bdd7045f2e3cf69c7171533332abc9f61a6b19b57a5a38feccd3484d8d043d470f5fd46096ac0c4f43357f905e1df649cabd81fa3c9dc0f303cfcc4d78675117843d3be17c362d577c2c9e31e0fab6641b18655bbc4452ca9bf19a31039ce14d96c18285b6bcb68ed932d43e2433cb5a4938683d2cb663ccea7d4f11287c37618d3c4502bd9d988acc8289491d60f23b0a8aae48c1b50ae19327c9e0f56c7dc3257fadea9a7363bb008d4c084cd33e998f4b118997d2f1632805421d9ff47fae245e1eb31200d023301d36b1dbc7ca940668662348664d4192850045ce3920e06db890588459269b634d9a23fe8a6c331e55dbad7dd02604384f53f636e6b427e239f5dff0b7990a82f3b6dbdee10b9f5344cf0209117da21c5216cbde500fddfed25b3e6c2b2d726d04bfdb18fa61299db6f259336c7a1bc5a1acc3b37b79b324659c78109fb716766ae59c849f10ef3e6af4c89f5466c8d5375478510fc15e2f59460cc5314272841cb91cd3030838274966d2429d307dc6b8792d4323b1ebacd1ab717e8c64ee3dfafcb4c8cffff1eb31692dcd8b07dcb2ad27bf2b9ca9714b3749f747fa1b07bd23d3aa12543a4fd806cff1930496d65fec6e170e20b7f4a63fd5bf5cb178e60941c74bba38d6ac8dd3be6177dd43c454889d21765457cbe41f7e84bdcce31df724de9648db2aea0d4487bde04720a66c9ecc1287dc750ce886b4599a24b7766188797c8f07cbe6090559fb7f427385da6eb5b2208b51cbd4dec3c22761a62a78cfa84b79fc263e2141ed580805ca44390f56f45914aac726ead5b286d3641c814811418534dbcf1382449ef277dab32c4670ba456f85cec632ba230585f0d84a386a87141b05dbc9490eb0670e301f55dc5a4621004a1787fbba0d8e5eec73b34648c73b496d7c993ecbe80f4f8f78adfa48652c19d7843f1722d553eae2840950df18b9d200b499b093064baab4b7095754e736f3a1c1115a9c76ae49936009242a825ac98b012d0e7cf265b07e53535862efc7f1aa63e8d2d67c0f00681056edd1ba82688f624682584039c8ae8635c105d3f2b69e4069bb3f222153f23133a89708e5b6760457fa105c3c9b97ef8ba3a61960feb5f04427b87c0c5f75a39311108179eb2f68243af21c2874b348af790576849adc93f6c1aa61a13ea13d81c323457ec547b92cf2985392acd79c5bd53e4838496cce09196235569b726db6d3124fab410ed9138544b34473381d2a50f438e713e8f4be24876aeb84709d2405a773408239e7ce8a54ed7a086aa2255009fc42a50c91e225a6ec87b65605e39386cd043cf915ef33dfb239baa3b7bb5dc920287b20200ddfbd68379e2d48c3c27437fa4f3bd91a883cef03dec75a2882416db60cb527e2d88ffb8eda9ebc5e501d2bbfb7f38595520093f716ed2abd8eacfd473be9daa98089a03a54d06bba196b18283d06765729acc226c82a421d91bf9539adbb1c442db96d0da581a13142ff605247ab43c4028920595023da3c204296e5d1a70377a2bfafd91b92aa6d8e1f4e41af84e9d87e7f9aa8d1d50dcc4de5bb21f3d2204fd15c32784a234914d551bd5ff43f75c36304d177ca115ccc6c8532dafd0cd3a7d7477c24eaada0dcd2ac7e351d521a469b7c8f60b5d8b99c7afa0087eb4960c2a44cdbb0de14fbea36919f312e74102426c499645269724c544dcc3c8a0bcf58a956e5483a92ede015e4ed4b2e56f9790c90146667ad73152e0895484456c3c4c485cb3df0527a9061597ca723894e56aec08f3b0e533ca696b53945874c229cb837548ed99ae67b8ca756cf47f0738b3c86c54aff0bd9b31ef0a21bda0e17d0f3905b0bba38337638241a6eb4bee82ab1202f2d8c08e4f99432b751fcab8416aa7e9820b1607ab80ddad4ff7533ed95dfe2f9788791c86b73521204dfffee95179090eeab1308a66356db7197f82a2a502d98ce0039aefccafec2bc15f4839d7bef1130fd7da47ddcfdff2e0a65311ea9f37fe0d8334d29d259211911a148dbe10d2dbe11e35a8ccfc078d5dfa466636af7df88987a70d1288ec9e89dec7d39865c1b34d6c020455ea3e91d4b631f449d6c9b687047cd4ee45ecc013423052df0777ba8d704c188cc915917822c255e29b1ffc3a89277caaa6d9c21b3c56b740d9b4835911436c03d63c9763e9d3b667c7a611f2291464444bccfc1ff780e534894ce537837dfac3746eae157a318901dd2a429d31450b5b7a5ea1723ec91b0aaacaf09bc38673516cfe27f558240e6174e65af0dec1e09550b2200e94fdd7e2f802d4e48f35be1d69b8a4f0b56470841d9b75918fd20aa65f880792ca43c57e3cd3b3e4fb16af1ec2b411a5759c88616ac386154c7b9c4b063d3c0c50dece3de59dc8b8382a0db39209ac09e0b89b74b7bb60f931faf98628ae26cb80fe447bf9d7029abe19f5622e5dece2803afe03e57d3e546338c8cda918ee62a2f1af68c098186062124affb5293d9534e79909a8fe8217190a14c72cd294460e2fec99b0572dde8948cbe6c39aeba95c3e98248a6ffaaaf03508b1e09904371fde5d4bd61b2abb210716c2931f7fe18f8f11ae35cfb3600fb4cfda4cc9f2f382b77dd25d910948c4db4c21f345d0da07243407129e7bd5cf8eefdea500579bb882f091d7bcd3f39f467aaa0bbca7a015cdb1a04e4cb1c4a22b66ad278b7544d23273aa89ce571814c7368de8067452804cefd7802eac74724ab0f34a37d4dc5eb7062f4aeccf9c1cf8fc7af85634904b2a3bcd6c7c2642d5bfe142d4b257ab07c909147ec6a6112abc602ef3dfc7a64d22a4475586b80534ade5a44e591f4b2ab912bcf5f98c152eaa1697ac9bf894b5b3db4f9fbfa69b9435b06f91c6ba58a9c1a5aadc83dfa04cc1d710cfba308e8d74659c17a8e0b485965b54d26223ca712fd6fee53dbd66acf58bf3ef716dbb69142833158ca32e38f6f65cae5333c212e16e1825f05d23ac274199f0dd4215b6d79918f25acb93704085f2fab5600d30be650dbc96f78c183c92c61a3c64416f6eeab837e9affc08038ac57607dc9e20fb023bec348435429ceedb1cd5a1f0755c3351d5cc6b895e2022b1ec8a78b31c9c579aa271ca70fae59c1cf1712c2d006c197a15a5ddad5efc8e4c2c1964c98d230c33cf4061b57793dc4bfa79a30c10784e27b0f45735e43563c0b7fb7291ea13a0e01b096bb31ce4cca75960ff94e8b31b7c807b0ed990cbf61dd4e9a8497284f0c0ec6877dec6a1e942783ed09a1045365d653c7d119b4647ffbef685b08dd1f05f7319429ecd7af989b2bf44a4046f33bc7b2391209e75c2340bded30fac197de8cc2eec064082f6ac85ece967a9abeb1716a807762dc1ef6d6b84245044a2714a701f3955dc3b26498ce65ebd4bc9e2ef7db641e7c221ed72601f748320ccb9c0d461a5d1041fc51ee5f6e96b2e31a9370a9f9493e911773aa40fc923a7f32f91e2df143064aa4116f6bc647fd850a46a381d4699feeac4411c490de4aff1fdf036e9987cf3d8a79909d3ba7a973fc35b80810504e0dd4103d770bd763e8423d7f6080c6bfd1bc24bc72b4ef3ded9eb210ec77dddfdccd716df2d3c5d4beee2666950182bd18c46ef740979f473ae515d3c12aa4c9ea7e4bdf5d0ead7641a5ab4240b4ea7cefc753bdf859cd3d2311945e52b1f774cb21f48e3d10b6f5e172c28b50839c0cbb50c6fd0037289c387681ca772ca803bf0f18773404493294e55c79bf649543704d1be279c12b1c4a93f88f250d3beec378ff9abb0b0cfed21c7c82c3a1ceedd4d14dde4cedadd9849ffcf4c7790ddc7fb7b747218b8fb4d9d4acf2868c241ba2aab6718e6247ffb410c21ebae728470ea9c3ccb57c9943e3d5d60012faa5fd590b0df7d808b7c529aa935dae5e6a1807e9e1da1e572da75997ab08f05b647a0ceb85dd8786033d372d5f8a362926b8c1fccaed540df6a8f36738d93d83777c39ae8c9870c5a3dca6469f80b47fd76285fd97209d8d3071780e1209d9ec821e07af3df3799ddfa50b2420aa87b4132dc31bd2c36511786e67312344e50de3b5b185a78a8e265f3227a94aca4c3e2c98cc2d2e159794ce50db44755841f51902224336ac643da54d85facbb041808e49b7f038fb5ad4ca082b508b2a235efa139e6c141b9f055b53f21de43ecbe5bbb63a08220bbb8dd87f61531cbfe387ed15fbea701605b7f61a738b461772fdfef02a99817ec3c3768226c8b7c4024044fc0973329222a14155e212dda1642176c81c20311fff104ac480c5a7d977fb6ebc0469d83148a51a00c1fd184502398a05918095c6ca29c08260203b8d7b792f615ce35c36b39bfb7ba33a0abaada72366288db051395f00a2ec7559fe2a4c4f14ecff9e246c3536a46dbdb62a1a3a2a8fe217dca4ff40f1c7f738a3813b5e73e4e9f7d84588545f660d19521fccc2edc07322e39a6e440b1e105e0fefcbcefb456d2b146ebd36dc0935e1184672e6bef3807e2293ab01b3f6f3213d0c653c0d6e110bae31551801fd19bfbeedec1ac3c54592ea513c45fb3cd6b4a934b257e2671701052242d42a10e5f32d93ec8b9b9c251461a41a5efa9b0fd004f57c08416f4d468c0b3feedfc1261f57ecd14e3f0865091dfd9d3fa023725e95a153330f5b9969fe8dfd9cf9cf548dca7f5275c7ee73cba0f9ccc869e3d56eef9ed126552cb048021439021974a3223ef664a3c03e0b10a011a35cefef51893a1db543947c7126858859e1243a4d8fd2f85c9454470eced9ac8b89ec804c08c6a6758ea4377b67e5642b028e28e556c2d9aa520735e1a4e52c438efd42dd35e28fa3444f277f0fcb64501210a154afdec45fa3217132f45ba1fbedb8540757faf232f504b692be619c218ab6bf2b13dbc", 0x1000, 0xffff, 0x0, 0x3, r2}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f00000010c0)="b4b7f88f58dcdef5bb0c5e1bfac7085cb805675fa51f96f7641d6dff9e70b11b1497b3bdb51dd648914acf2e8939231569d61870ef94953bb65ba0bd60c6b12714dae073f9bc3d8e3d1b6b1c2d2ed7f1b86529cc0267", 0x56, 0x9, 0x0, 0x1}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000001180)="e4f3c1bb0aca23674a8a4b5b50ff5594af3cb5068b0d7001241958aae8d545dc8e00f8445c8013ebf9deb84ee5910d43e52d9c354294deb98c84efaa08cd7f09026c6aa67a52f60f4c360b50d26beae0900aec81e70d128b7e722921611cd82152c5d84e6de7f6350ed2342adf7ce951713346d43c852396767a2438382805cc166c9a043b83e778bbc82999860e6014aa46e145dd9a8a3d3d3a31a6ae67db1ce6647e91e3c11ff6bd79", 0xaa, 0x1, 0x0, 0x3}]) io_setup(0x7, &(0x7f00000012c0)=0x0) eventfd(0x3f) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000001400)={r6, 0x6, 0x800, r4}) io_submit(r3, 0x1, &(0x7f00000013c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x7, 0xb9, r0, &(0x7f0000001300)="760ba5f9547c77f85b204c2bf3b50125318152097c08dd15e87a51aab20341192740a32da74bbb0cbb9c42451d0cceabb89601d6cf33eff353c348dca2567b1a7603810880738e21307de74c", 0x4c, 0x9, 0x0, 0x1, r4}]) 05:33:16 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x5}}) 05:33:16 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) write$eventfd(r0, &(0x7f0000000280)=0xc26, 0x8) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000000c0)={0x0, {0x100, 0x9}}) 05:33:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0xfdfd}}) 05:33:16 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0xe}) 05:33:16 executing program 3: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (async) write$eventfd(r0, &(0x7f0000000280)=0xc26, 0x8) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000000c0)={0x0, {0x100, 0x9}}) 05:33:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0xff00}}) 05:33:16 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) (fail_nth: 1) 05:33:16 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 5: r0 = eventfd2(0x7, 0x80800) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r1, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) (async) r2 = eventfd(0x2b46) io_submit(r1, 0x3, &(0x7f0000001280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x3ff, 0xffffffffffffffff, &(0x7f00000000c0)="9a37334139430d7e2b04cbe9ee8a3c00458ed7876a048b440d5d577fac1aad743c35e775cc2cf79ceb39eccc5818b37a408fabdf14c4f68df6e47b117c4e13a5c9d4f51d9848f9355454b2cf8e1a9600082b22d4f5d628a01d866515bc4d3e4c289451efd0b539235f4cea057ccbfeeb8ef6da466690e14b5c04f523368d58654726b8c920890a35498a8f766729ac89aff65536d4ad3df799e57f09d763da26a895e2fab96707d1657145e9bd66ab643c67103db65dc08390d8adcce4adabb94aa6c11395514bc40b4e4cd65dbe6cd4f2c2d9ff20b30d1742066e619cc65d7959820a7c96327e91dc84992681472b2978a4d05896c6cf1c426d371ac35ee376defde504f2ff87430acee83c741f29681e4957211b51ea357f7a10bc92c42b46c86e7fda9e330bb7fd0a568ab2d541408c7e024b6b0c3396e47dc82db7d5cfc56a7a284d2d5ce0f765e6744132d6bbcea9aeee626531955735725c04726b98e26d6b79cade820ab7dbb37da1f1ec6a7cb3e2d976974fe2fb970c782a20f6b56d9b2a55fcce673c737df3649050f7e1042986309416fbe7a71107f75a7a783ba79b43cd8cacd7a4437e09535d27f488f103cbf490f3865fcdb80bbd0216eddd214e14053a86a236294dbe0daf5d3e4b60cb08aadc31995e49629b209aca8e23cefbf5052c4bb42f421587feab4889ff14019161e9a748cc0b5825986030ce1b92ce6cf1d87b2c77fc12b7e8863edfa90a5786e8decb6e7505d403a2888d0e521e1132ff5af51bbecdfdbb1fb54bc70c0357b8f03256884bcc6a35624be2dc63e43430afcc9a9af16c6a242448dfba065fd5d2eb02d9ff7a275726fa4c1815055505ddf028a573b0c05c005c4b8eae6bdd7045f2e3cf69c7171533332abc9f61a6b19b57a5a38feccd3484d8d043d470f5fd46096ac0c4f43357f905e1df649cabd81fa3c9dc0f303cfcc4d78675117843d3be17c362d577c2c9e31e0fab6641b18655bbc4452ca9bf19a31039ce14d96c18285b6bcb68ed932d43e2433cb5a4938683d2cb663ccea7d4f11287c37618d3c4502bd9d988acc8289491d60f23b0a8aae48c1b50ae19327c9e0f56c7dc3257fadea9a7363bb008d4c084cd33e998f4b118997d2f1632805421d9ff47fae245e1eb31200d023301d36b1dbc7ca940668662348664d4192850045ce3920e06db890588459269b634d9a23fe8a6c331e55dbad7dd02604384f53f636e6b427e239f5dff0b7990a82f3b6dbdee10b9f5344cf0209117da21c5216cbde500fddfed25b3e6c2b2d726d04bfdb18fa61299db6f259336c7a1bc5a1acc3b37b79b324659c78109fb716766ae59c849f10ef3e6af4c89f5466c8d5375478510fc15e2f59460cc5314272841cb91cd3030838274966d2429d307dc6b8792d4323b1ebacd1ab717e8c64ee3dfafcb4c8cffff1eb31692dcd8b07dcb2ad27bf2b9ca9714b3749f747fa1b07bd23d3aa12543a4fd806cff1930496d65fec6e170e20b7f4a63fd5bf5cb178e60941c74bba38d6ac8dd3be6177dd43c454889d21765457cbe41f7e84bdcce31df724de9648db2aea0d4487bde04720a66c9ecc1287dc750ce886b4599a24b7766188797c8f07cbe6090559fb7f427385da6eb5b2208b51cbd4dec3c22761a62a78cfa84b79fc263e2141ed580805ca44390f56f45914aac726ead5b286d3641c814811418534dbcf1382449ef277dab32c4670ba456f85cec632ba230585f0d84a386a87141b05dbc9490eb0670e301f55dc5a4621004a1787fbba0d8e5eec73b34648c73b496d7c993ecbe80f4f8f78adfa48652c19d7843f1722d553eae2840950df18b9d200b499b093064baab4b7095754e736f3a1c1115a9c76ae49936009242a825ac98b012d0e7cf265b07e53535862efc7f1aa63e8d2d67c0f00681056edd1ba82688f624682584039c8ae8635c105d3f2b69e4069bb3f222153f23133a89708e5b6760457fa105c3c9b97ef8ba3a61960feb5f04427b87c0c5f75a39311108179eb2f68243af21c2874b348af790576849adc93f6c1aa61a13ea13d81c323457ec547b92cf2985392acd79c5bd53e4838496cce09196235569b726db6d3124fab410ed9138544b34473381d2a50f438e713e8f4be24876aeb84709d2405a773408239e7ce8a54ed7a086aa2255009fc42a50c91e225a6ec87b65605e39386cd043cf915ef33dfb239baa3b7bb5dc920287b20200ddfbd68379e2d48c3c27437fa4f3bd91a883cef03dec75a2882416db60cb527e2d88ffb8eda9ebc5e501d2bbfb7f38595520093f716ed2abd8eacfd473be9daa98089a03a54d06bba196b18283d06765729acc226c82a421d91bf9539adbb1c442db96d0da581a13142ff605247ab43c4028920595023da3c204296e5d1a70377a2bfafd91b92aa6d8e1f4e41af84e9d87e7f9aa8d1d50dcc4de5bb21f3d2204fd15c32784a234914d551bd5ff43f75c36304d177ca115ccc6c8532dafd0cd3a7d7477c24eaada0dcd2ac7e351d521a469b7c8f60b5d8b99c7afa0087eb4960c2a44cdbb0de14fbea36919f312e74102426c499645269724c544dcc3c8a0bcf58a956e5483a92ede015e4ed4b2e56f9790c90146667ad73152e0895484456c3c4c485cb3df0527a9061597ca723894e56aec08f3b0e533ca696b53945874c229cb837548ed99ae67b8ca756cf47f0738b3c86c54aff0bd9b31ef0a21bda0e17d0f3905b0bba38337638241a6eb4bee82ab1202f2d8c08e4f99432b751fcab8416aa7e9820b1607ab80ddad4ff7533ed95dfe2f9788791c86b73521204dfffee95179090eeab1308a66356db7197f82a2a502d98ce0039aefccafec2bc15f4839d7bef1130fd7da47ddcfdff2e0a65311ea9f37fe0d8334d29d259211911a148dbe10d2dbe11e35a8ccfc078d5dfa466636af7df88987a70d1288ec9e89dec7d39865c1b34d6c020455ea3e91d4b631f449d6c9b687047cd4ee45ecc013423052df0777ba8d704c188cc915917822c255e29b1ffc3a89277caaa6d9c21b3c56b740d9b4835911436c03d63c9763e9d3b667c7a611f2291464444bccfc1ff780e534894ce537837dfac3746eae157a318901dd2a429d31450b5b7a5ea1723ec91b0aaacaf09bc38673516cfe27f558240e6174e65af0dec1e09550b2200e94fdd7e2f802d4e48f35be1d69b8a4f0b56470841d9b75918fd20aa65f880792ca43c57e3cd3b3e4fb16af1ec2b411a5759c88616ac386154c7b9c4b063d3c0c50dece3de59dc8b8382a0db39209ac09e0b89b74b7bb60f931faf98628ae26cb80fe447bf9d7029abe19f5622e5dece2803afe03e57d3e546338c8cda918ee62a2f1af68c098186062124affb5293d9534e79909a8fe8217190a14c72cd294460e2fec99b0572dde8948cbe6c39aeba95c3e98248a6ffaaaf03508b1e09904371fde5d4bd61b2abb210716c2931f7fe18f8f11ae35cfb3600fb4cfda4cc9f2f382b77dd25d910948c4db4c21f345d0da07243407129e7bd5cf8eefdea500579bb882f091d7bcd3f39f467aaa0bbca7a015cdb1a04e4cb1c4a22b66ad278b7544d23273aa89ce571814c7368de8067452804cefd7802eac74724ab0f34a37d4dc5eb7062f4aeccf9c1cf8fc7af85634904b2a3bcd6c7c2642d5bfe142d4b257ab07c909147ec6a6112abc602ef3dfc7a64d22a4475586b80534ade5a44e591f4b2ab912bcf5f98c152eaa1697ac9bf894b5b3db4f9fbfa69b9435b06f91c6ba58a9c1a5aadc83dfa04cc1d710cfba308e8d74659c17a8e0b485965b54d26223ca712fd6fee53dbd66acf58bf3ef716dbb69142833158ca32e38f6f65cae5333c212e16e1825f05d23ac274199f0dd4215b6d79918f25acb93704085f2fab5600d30be650dbc96f78c183c92c61a3c64416f6eeab837e9affc08038ac57607dc9e20fb023bec348435429ceedb1cd5a1f0755c3351d5cc6b895e2022b1ec8a78b31c9c579aa271ca70fae59c1cf1712c2d006c197a15a5ddad5efc8e4c2c1964c98d230c33cf4061b57793dc4bfa79a30c10784e27b0f45735e43563c0b7fb7291ea13a0e01b096bb31ce4cca75960ff94e8b31b7c807b0ed990cbf61dd4e9a8497284f0c0ec6877dec6a1e942783ed09a1045365d653c7d119b4647ffbef685b08dd1f05f7319429ecd7af989b2bf44a4046f33bc7b2391209e75c2340bded30fac197de8cc2eec064082f6ac85ece967a9abeb1716a807762dc1ef6d6b84245044a2714a701f3955dc3b26498ce65ebd4bc9e2ef7db641e7c221ed72601f748320ccb9c0d461a5d1041fc51ee5f6e96b2e31a9370a9f9493e911773aa40fc923a7f32f91e2df143064aa4116f6bc647fd850a46a381d4699feeac4411c490de4aff1fdf036e9987cf3d8a79909d3ba7a973fc35b80810504e0dd4103d770bd763e8423d7f6080c6bfd1bc24bc72b4ef3ded9eb210ec77dddfdccd716df2d3c5d4beee2666950182bd18c46ef740979f473ae515d3c12aa4c9ea7e4bdf5d0ead7641a5ab4240b4ea7cefc753bdf859cd3d2311945e52b1f774cb21f48e3d10b6f5e172c28b50839c0cbb50c6fd0037289c387681ca772ca803bf0f18773404493294e55c79bf649543704d1be279c12b1c4a93f88f250d3beec378ff9abb0b0cfed21c7c82c3a1ceedd4d14dde4cedadd9849ffcf4c7790ddc7fb7b747218b8fb4d9d4acf2868c241ba2aab6718e6247ffb410c21ebae728470ea9c3ccb57c9943e3d5d60012faa5fd590b0df7d808b7c529aa935dae5e6a1807e9e1da1e572da75997ab08f05b647a0ceb85dd8786033d372d5f8a362926b8c1fccaed540df6a8f36738d93d83777c39ae8c9870c5a3dca6469f80b47fd76285fd97209d8d3071780e1209d9ec821e07af3df3799ddfa50b2420aa87b4132dc31bd2c36511786e67312344e50de3b5b185a78a8e265f3227a94aca4c3e2c98cc2d2e159794ce50db44755841f51902224336ac643da54d85facbb041808e49b7f038fb5ad4ca082b508b2a235efa139e6c141b9f055b53f21de43ecbe5bbb63a08220bbb8dd87f61531cbfe387ed15fbea701605b7f61a738b461772fdfef02a99817ec3c3768226c8b7c4024044fc0973329222a14155e212dda1642176c81c20311fff104ac480c5a7d977fb6ebc0469d83148a51a00c1fd184502398a05918095c6ca29c08260203b8d7b792f615ce35c36b39bfb7ba33a0abaada72366288db051395f00a2ec7559fe2a4c4f14ecff9e246c3536a46dbdb62a1a3a2a8fe217dca4ff40f1c7f738a3813b5e73e4e9f7d84588545f660d19521fccc2edc07322e39a6e440b1e105e0fefcbcefb456d2b146ebd36dc0935e1184672e6bef3807e2293ab01b3f6f3213d0c653c0d6e110bae31551801fd19bfbeedec1ac3c54592ea513c45fb3cd6b4a934b257e2671701052242d42a10e5f32d93ec8b9b9c251461a41a5efa9b0fd004f57c08416f4d468c0b3feedfc1261f57ecd14e3f0865091dfd9d3fa023725e95a153330f5b9969fe8dfd9cf9cf548dca7f5275c7ee73cba0f9ccc869e3d56eef9ed126552cb048021439021974a3223ef664a3c03e0b10a011a35cefef51893a1db543947c7126858859e1243a4d8fd2f85c9454470eced9ac8b89ec804c08c6a6758ea4377b67e5642b028e28e556c2d9aa520735e1a4e52c438efd42dd35e28fa3444f277f0fcb64501210a154afdec45fa3217132f45ba1fbedb8540757faf232f504b692be619c218ab6bf2b13dbc", 0x1000, 0xffff, 0x0, 0x3, r2}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f00000010c0)="b4b7f88f58dcdef5bb0c5e1bfac7085cb805675fa51f96f7641d6dff9e70b11b1497b3bdb51dd648914acf2e8939231569d61870ef94953bb65ba0bd60c6b12714dae073f9bc3d8e3d1b6b1c2d2ed7f1b86529cc0267", 0x56, 0x9, 0x0, 0x1}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000001180)="e4f3c1bb0aca23674a8a4b5b50ff5594af3cb5068b0d7001241958aae8d545dc8e00f8445c8013ebf9deb84ee5910d43e52d9c354294deb98c84efaa08cd7f09026c6aa67a52f60f4c360b50d26beae0900aec81e70d128b7e722921611cd82152c5d84e6de7f6350ed2342adf7ce951713346d43c852396767a2438382805cc166c9a043b83e778bbc82999860e6014aa46e145dd9a8a3d3d3a31a6ae67db1ce6647e91e3c11ff6bd79", 0xaa, 0x1, 0x0, 0x3}]) (async) io_setup(0x7, &(0x7f00000012c0)=0x0) eventfd(0x3f) (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) (async) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000001400)={r6, 0x6, 0x800, r4}) (async) io_submit(r3, 0x1, &(0x7f00000013c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x7, 0xb9, r0, &(0x7f0000001300)="760ba5f9547c77f85b204c2bf3b50125318152097c08dd15e87a51aab20341192740a32da74bbb0cbb9c42451d0cceabb89601d6cf33eff353c348dca2567b1a7603810880738e21307de74c", 0x4c, 0x9, 0x0, 0x1, r4}]) 05:33:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0xffe7}}) 05:33:16 executing program 3: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) write$eventfd(r0, &(0x7f0000000280)=0xc26, 0x8) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000000c0)={0x0, {0x100, 0x9}}) 05:33:16 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) (fail_nth: 2) 05:33:16 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x1000000}}) 05:33:16 executing program 3: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:16 executing program 5: r0 = eventfd2(0x7, 0x80800) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000000), 0x8) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r1, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) r2 = eventfd(0x2b46) io_submit(r1, 0x3, &(0x7f0000001280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x3ff, 0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1000, 0xffff, 0x0, 0x3, r2}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f00000010c0)="b4b7f88f58dcdef5bb0c5e1bfac7085cb805675fa51f96f7641d6dff9e70b11b1497b3bdb51dd648914acf2e8939231569d61870ef94953bb65ba0bd60c6b12714dae073f9bc3d8e3d1b6b1c2d2ed7f1b86529cc0267", 0x56, 0x9, 0x0, 0x1}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000001180)="e4f3c1bb0aca23674a8a4b5b50ff5594af3cb5068b0d7001241958aae8d545dc8e00f8445c8013ebf9deb84ee5910d43e52d9c354294deb98c84efaa08cd7f09026c6aa67a52f60f4c360b50d26beae0900aec81e70d128b7e722921611cd82152c5d84e6de7f6350ed2342adf7ce951713346d43c852396767a2438382805cc166c9a043b83e778bbc82999860e6014aa46e145dd9a8a3d3d3a31a6ae67db1ce6647e91e3c11ff6bd79", 0xaa, 0x1, 0x0, 0x3}]) io_setup(0x7, &(0x7f00000012c0)=0x0) (async, rerun: 64) eventfd(0x3f) (async, rerun: 64) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000001400)={r6, 0x6, 0x800, r4}) (async) io_submit(r3, 0x1, &(0x7f00000013c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x7, 0xb9, r0, &(0x7f0000001300)="760ba5f9547c77f85b204c2bf3b50125318152097c08dd15e87a51aab20341192740a32da74bbb0cbb9c42451d0cceabb89601d6cf33eff353c348dca2567b1a7603810880738e21307de74c", 0x4c, 0x9, 0x0, 0x1, r4}]) 05:33:16 executing program 2: r0 = eventfd2(0x0, 0x800) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f00000002c0)={0x3, 0x10000}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:17 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 3: eventfd2(0x0, 0x800) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x2000000}}) 05:33:17 executing program 2: r0 = eventfd2(0x0, 0x800) (async) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f00000002c0)={0x3, 0x10000}) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r4, 0x1) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:17 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 3: eventfd2(0x0, 0x800) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) (fail_nth: 3) 05:33:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x3000000}}) 05:33:17 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0xfffffff8, 0x602, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1ff, 0x1, 0x1}, 0x48) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380), 0x40001, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x2200, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x8, 0x3, 0x0, 0x5, 0x1054, r1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6bc1, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x0, 0x7, 0xc, 0xb7b57111fd898c61, 0x8, 0x4}, @ldst={0x3, 0x1, 0x6, 0x9, 0x7, 0xfffffffffffffff4, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}]}, &(0x7f00000002c0)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000300)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x6, 0x3, 0x1}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000480)=[r4, r5, r6]}, 0x80) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x80ac2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4000, &(0x7f0000000040), 0x0, r7, 0x3}) 05:33:17 executing program 3: eventfd2(0x0, 0x800) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 2: r0 = eventfd2(0x0, 0x800) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f00000002c0)={0x3, 0x10000}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x0, 0x800) (async) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f00000002c0)={0x3, 0x10000}) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r4, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r4, 0x1) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) 05:33:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x4000000}}) 05:33:17 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) (fail_nth: 4) 05:33:17 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async, rerun: 32) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0xfffffff8, 0x602, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1ff, 0x1, 0x1}, 0x48) (async, rerun: 64) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380), 0x40001, 0x0) (rerun: 64) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x2200, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x8, 0x3, 0x0, 0x5, 0x1054, r1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) (async) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6bc1, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x0, 0x7, 0xc, 0xb7b57111fd898c61, 0x8, 0x4}, @ldst={0x3, 0x1, 0x6, 0x9, 0x7, 0xfffffffffffffff4, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}]}, &(0x7f00000002c0)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000300)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x6, 0x3, 0x1}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000480)=[r4, r5, r6]}, 0x80) (async, rerun: 64) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x80ac2, 0x0) (rerun: 64) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4000, &(0x7f0000000040), 0x0, r7, 0x3}) 05:33:17 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x5000000}}) 05:33:17 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) (fail_nth: 5) 05:33:17 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x0, 0x800) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) 05:33:17 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x6000000}}) 05:33:17 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x541b, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0xfffffff8, 0x602, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1ff, 0x1, 0x1}, 0x48) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380), 0x40001, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x2200, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x8, 0x3, 0x0, 0x5, 0x1054, r1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) (async) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6bc1, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x0, 0x7, 0xc, 0xb7b57111fd898c61, 0x8, 0x4}, @ldst={0x3, 0x1, 0x6, 0x9, 0x7, 0xfffffffffffffff4, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}]}, &(0x7f00000002c0)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000300)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x6, 0x3, 0x1}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000480)=[r4, r5, r6]}, 0x80) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x80ac2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4000, &(0x7f0000000040), 0x0, r7, 0x3}) 05:33:17 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 05:33:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x7000000}}) 05:33:17 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:17 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x8) 05:33:17 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) (fail_nth: 6) 05:33:17 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (fail_nth: 1) 05:33:17 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0xe7ffffff}}) 05:33:17 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x8) 05:33:17 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) (fail_nth: 7) 05:33:17 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (fail_nth: 2) 05:33:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0xfdfdffff}}) 05:33:17 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x0, 0x800) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) [ 3125.486617][T12480] ERROR: Out of memory at tomoyo_realpath_from_path. 05:33:17 executing program 3: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x8) 05:33:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0xff000000}}) 05:33:17 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (fail_nth: 3) [ 3125.564770][T12489] ERROR: Out of memory at tomoyo_realpath_from_path. 05:33:17 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:17 executing program 3: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x10, &(0x7f0000000140)={'custom0\x00'}) 05:33:17 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) (fail_nth: 8) 05:33:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0xfffffdfd}}) 05:33:17 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = eventfd(0x80000000) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x2, r1}) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0x88, 0x6, '\x00', &(0x7f0000000000)=0x51}) 05:33:17 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) [ 3125.668702][T12507] FAULT_INJECTION: forcing a failure. [ 3125.668702][T12507] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:33:17 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000280)={0x0, @reserved}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:17 executing program 3: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x10, &(0x7f0000000140)={'custom0\x00'}) [ 3125.668736][T12507] CPU: 0 PID: 12507 Comm: syz-executor.4 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 05:33:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0xffffffe7}}) 05:33:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x2, 0x0) [ 3125.668764][T12507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3125.668779][T12507] Call Trace: [ 3125.668786][T12507] 05:33:18 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) (fail_nth: 9) [ 3125.668796][T12507] dump_stack_lvl+0xcd/0x134 05:33:18 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000280)={0x0, @reserved}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x0, 0x800) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000280)={0x0, @reserved}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) 05:33:18 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) [ 3125.668836][T12507] should_fail.cold+0x5/0xa 05:33:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0xffffffff}}) 05:33:18 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = eventfd(0x80000000) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x2, r1}) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0x88, 0x6, '\x00', &(0x7f0000000000)=0x51}) 05:33:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) [ 3125.668876][T12507] _copy_to_user+0x2a/0x140 05:33:18 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) (fail_nth: 1) [ 3125.668923][T12507] simple_read_from_buffer+0xcc/0x160 [ 3125.668970][T12507] proc_fail_nth_read+0x187/0x220 [ 3125.669013][T12507] ? proc_exe_link+0x1d0/0x1d0 [ 3125.669052][T12507] ? security_file_permission+0xab/0xd0 05:33:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2}) 05:33:18 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) (fail_nth: 10) [ 3125.669097][T12507] ? proc_exe_link+0x1d0/0x1d0 [ 3125.669135][T12507] vfs_read+0x1ef/0x5d0 [ 3125.669179][T12507] ksys_read+0x127/0x250 05:33:18 executing program 2: r0 = eventfd2(0x0, 0x800) (async, rerun: 32) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 32) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000280)={0x0, @reserved}) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541c, 0x0) 05:33:18 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = eventfd(0x80000000) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x2, r1}) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0x88, 0x6, '\x00', &(0x7f0000000000)=0x51}) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) eventfd(0x80000000) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x2, r1}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0x88, 0x6, '\x00', &(0x7f0000000000)=0x51}) (async) [ 3125.669216][T12507] ? vfs_write+0xac0/0xac0 05:33:18 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) (fail_nth: 2) 05:33:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x2}}) [ 3125.669255][T12507] ? syscall_enter_from_user_mode+0x21/0x70 [ 3125.669305][T12507] do_syscall_64+0x35/0xb0 [ 3125.669339][T12507] entry_SYSCALL_64_after_hwframe+0x46/0xb0 05:33:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5421, 0x0) 05:33:18 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) (fail_nth: 11) 05:33:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x3}}) 05:33:18 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffbfffffffa085, 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x170810a1, 0x8) socket$l2tp6(0xa, 0x2, 0x73) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x3042, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) r3 = eventfd2(0xc, 0x80000) read$eventfd(r3, &(0x7f0000000040), 0x8) [ 3125.669368][T12507] RIP: 0033:0x7fa47ca3bc9c [ 3125.669389][T12507] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 05:33:18 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) (fail_nth: 3) 05:33:18 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r3 = socket(0x25, 0xe3752e8e8c5debb3, 0x877c) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) [ 3125.669418][T12507] RSP: 002b:00007fa47dc91160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 05:33:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5450, 0x0) 05:33:18 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r3 = socket(0x25, 0xe3752e8e8c5debb3, 0x877c) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) 05:33:18 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) 05:33:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x4}}) 05:33:18 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffbfffffffa085, 0x8) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) write$eventfd(r1, &(0x7f0000000000)=0x170810a1, 0x8) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x3042, 0x0) (async) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) r3 = eventfd2(0xc, 0x80000) read$eventfd(r3, &(0x7f0000000040), 0x8) [ 3125.669443][T12507] RAX: ffffffffffffffda RBX: 00007fa47cb9bf60 RCX: 00007fa47ca3bc9c [ 3125.669461][T12507] RDX: 000000000000000f RSI: 00007fa47dc911e0 RDI: 0000000000000004 05:33:18 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) 05:33:18 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async, rerun: 64) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async, rerun: 64) r3 = socket(0x25, 0xe3752e8e8c5debb3, 0x877c) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) 05:33:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x5}}) 05:33:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5451, 0x0) 05:33:18 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x2, 0x0) [ 3125.669477][T12507] RBP: 00007fa47dc911d0 R08: 0000000000000000 R09: 0000000000000000 [ 3125.669494][T12507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 05:33:18 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffbfffffffa085, 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) write$eventfd(r1, &(0x7f0000000000)=0x170810a1, 0x8) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x3042, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) r3 = eventfd2(0xc, 0x80000) read$eventfd(r3, &(0x7f0000000040), 0x8) [ 3125.669510][T12507] R13: 00007fff554a522f R14: 00007fa47dc91300 R15: 0000000000022000 [ 3125.669547][T12507] [ 3126.055115][T12552] ERROR: Out of memory at tomoyo_realpath_from_path. 05:33:18 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x64dd, 0x200402) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x0, r0}) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:33:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, 0x0) 05:33:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x6}}) 05:33:18 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xa, 0x0) [ 3126.145604][T12567] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3126.260089][T12581] FAULT_INJECTION: forcing a failure. [ 3126.260089][T12581] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:33:18 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x2, &(0x7f00000017c0)) 05:33:18 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r3 = eventfd2(0x7ff, 0x80800) r4 = eventfd(0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3, 0x2, 0x79604e94, r4}) [ 3126.260123][T12581] CPU: 1 PID: 12581 Comm: syz-executor.3 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0 [ 3126.260150][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:33:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x7}}) 05:33:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5460, 0x0) 05:33:18 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x1c, 0x0) 05:33:18 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x64dd, 0x200402) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x0, r0}) (async) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:33:18 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r3 = eventfd2(0x7ff, 0x80800) r4 = eventfd(0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3, 0x2, 0x79604e94, r4}) [ 3126.260166][T12581] Call Trace: [ 3126.260172][T12581] [ 3126.260182][T12581] dump_stack_lvl+0xcd/0x134 [ 3126.260221][T12581] should_fail.cold+0x5/0xa [ 3126.260251][T12581] _copy_to_user+0x2a/0x140 05:33:18 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x3, &(0x7f00000017c0)) 05:33:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x8933, 0x0) 05:33:18 executing program 5: r0 = eventfd2(0x7fe000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x64dd, 0x200402) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x0, r0}) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) [ 3126.260296][T12581] simple_read_from_buffer+0xcc/0x160 [ 3126.260342][T12581] proc_fail_nth_read+0x187/0x220 [ 3126.260385][T12581] ? proc_exe_link+0x1d0/0x1d0 [ 3126.260425][T12581] ? security_file_permission+0xab/0xd0 [ 3126.260470][T12581] ? proc_exe_link+0x1d0/0x1d0 05:33:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0xe7}}) 05:33:19 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x2f, 0x0) [ 3126.260508][T12581] vfs_read+0x1ef/0x5d0 [ 3126.260551][T12581] ksys_read+0x127/0x250 [ 3126.260589][T12581] ? vfs_write+0xac0/0xac0 [ 3126.260628][T12581] ? syscall_enter_from_user_mode+0x21/0x70 05:33:19 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) r3 = eventfd2(0x7ff, 0x80800) (async) r4 = eventfd(0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3, 0x2, 0x79604e94, r4}) [ 3126.260679][T12581] do_syscall_64+0x35/0xb0 05:33:19 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) eventfd2(0x1f, 0x80001) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x7, @win={{0x101, 0x2, 0x10000, 0x8}, 0x7, 0x9, &(0x7f00000000c0)={{0x0, 0x3, 0x5, 0x7}, &(0x7f0000000040)={{0x2, 0x1, 0xf327, 0xfff}, &(0x7f0000000000)={{0x2, 0x8, 0x2ee, 0x5}}}}, 0x2, &(0x7f0000000140)="28cccecd8e287f8283e7f5d41d4e221f03efff64cffcbc46ea81b07ab75ef99528432cced151e5f4fe9f7e38730aac4f3a68efce1f33fa3107b126f7b97f1ad7fd20def6dceb6c8d417e9787b75965865d23e2240b50b62cc7f86b2e15940706bf14bdbea9d81af94b74fabb4f7dedd4202def013ebd6924f82dc5edade64b2e4e9d2160ec9cd23db80b4f209d8925812af74f311906646e4e233c27561631dc654bed756037c0a7d81ef971d0a609", 0x7}}) 05:33:19 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0xa, &(0x7f00000017c0)) [ 3126.260712][T12581] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 3126.260742][T12581] RIP: 0033:0x7f9520a3bc9c 05:33:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x300}}) 05:33:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x400448c9, 0x0) [ 3126.260769][T12581] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 05:33:19 executing program 2: r0 = eventfd2(0x0, 0x800) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000380)={0x2}) r1 = eventfd2(0x2c10, 0x80002) write$eventfd(r1, &(0x7f0000000400)=0x9, 0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000003c0)) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r2}) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x7f, 0x40000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440), 0x602000, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000480)) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000280)={0x81, 0x1, 0xfffffffffffffffc, 0x9, "ffd467f0ce3c130e51e6cf3ef3e28e1bcd48cf8bf8a149dfc90402874bd953226943e3626a3e5d073ad16acedf0dbfc48fa8b2d4ce885ac8a386f81756c35be2d3e86e7e55917641ba2aa98f2f5349de49f70e661075c78e71acbb2ea1078924cf63e2c7c1520f5b9c"}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:19 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 05:33:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x500}}) 05:33:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x400448dd, 0x0) [ 3126.260796][T12581] RSP: 002b:00007f9521c9e160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3126.260821][T12581] RAX: ffffffffffffffda RBX: 00007f9520b9bf60 RCX: 00007f9520a3bc9c 05:33:19 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x14, &(0x7f00000017c0)) [ 3126.260839][T12581] RDX: 000000000000000f RSI: 00007f9521c9e1e0 RDI: 0000000000000004 05:33:19 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5421, 0x0) 05:33:19 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) eventfd2(0x1f, 0x80001) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x7, @win={{0x101, 0x2, 0x10000, 0x8}, 0x7, 0x9, &(0x7f00000000c0)={{0x0, 0x3, 0x5, 0x7}, &(0x7f0000000040)={{0x2, 0x1, 0xf327, 0xfff}, &(0x7f0000000000)={{0x2, 0x8, 0x2ee, 0x5}}}}, 0x2, &(0x7f0000000140)="28cccecd8e287f8283e7f5d41d4e221f03efff64cffcbc46ea81b07ab75ef99528432cced151e5f4fe9f7e38730aac4f3a68efce1f33fa3107b126f7b97f1ad7fd20def6dceb6c8d417e9787b75965865d23e2240b50b62cc7f86b2e15940706bf14bdbea9d81af94b74fabb4f7dedd4202def013ebd6924f82dc5edade64b2e4e9d2160ec9cd23db80b4f209d8925812af74f311906646e4e233c27561631dc654bed756037c0a7d81ef971d0a609", 0x7}}) 05:33:19 executing program 2: r0 = eventfd2(0x0, 0x800) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000380)={0x2}) (async) r1 = eventfd2(0x2c10, 0x80002) write$eventfd(r1, &(0x7f0000000400)=0x9, 0x8) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000003c0)) (async) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r2}) (async) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x7f, 0x40000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440), 0x602000, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000480)) (async) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000280)={0x81, 0x1, 0xfffffffffffffffc, 0x9, "ffd467f0ce3c130e51e6cf3ef3e28e1bcd48cf8bf8a149dfc90402874bd953226943e3626a3e5d073ad16acedf0dbfc48fa8b2d4ce885ac8a386f81756c35be2d3e86e7e55917641ba2aa98f2f5349de49f70e661075c78e71acbb2ea1078924cf63e2c7c1520f5b9c"}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x600}}) [ 3126.260856][T12581] RBP: 00007f9521c9e1d0 R08: 0000000000000000 R09: 0000000000000000 05:33:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x400454ca, 0x0) [ 3126.260872][T12581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3126.260889][T12581] R13: 00007ffe646a791f R14: 00007f9521c9e300 R15: 0000000000022000 05:33:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x40049409, 0x0) 05:33:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x700}}) 05:33:19 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5450, 0x0) 05:33:19 executing program 2: r0 = eventfd2(0x0, 0x800) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000380)={0x2}) r1 = eventfd2(0x2c10, 0x80002) write$eventfd(r1, &(0x7f0000000400)=0x9, 0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000003c0)) write$vga_arbiter(r2, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r2}) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x7f, 0x40000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440), 0x602000, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000480)) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000280)={0x81, 0x1, 0xfffffffffffffffc, 0x9, "ffd467f0ce3c130e51e6cf3ef3e28e1bcd48cf8bf8a149dfc90402874bd953226943e3626a3e5d073ad16acedf0dbfc48fa8b2d4ce885ac8a386f81756c35be2d3e86e7e55917641ba2aa98f2f5349de49f70e661075c78e71acbb2ea1078924cf63e2c7c1520f5b9c"}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x0, 0x800) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000380)={0x2}) (async) eventfd2(0x2c10, 0x80002) (async) write$eventfd(r1, &(0x7f0000000400)=0x9, 0x8) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000003c0)) (async) write$vga_arbiter(r2, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r2}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x7f, 0x40000) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440), 0x602000, 0x0) (async) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000480)) (async) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000280)={0x81, 0x1, 0xfffffffffffffffc, 0x9, "ffd467f0ce3c130e51e6cf3ef3e28e1bcd48cf8bf8a149dfc90402874bd953226943e3626a3e5d073ad16acedf0dbfc48fa8b2d4ce885ac8a386f81756c35be2d3e86e7e55917641ba2aa98f2f5349de49f70e661075c78e71acbb2ea1078924cf63e2c7c1520f5b9c"}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) [ 3126.260926][T12581] [ 3126.353672][T12574] BUG: Bad rss-counter state mm:ffff88807aef15c0 type:MM_FILEPAGES val:1 05:33:19 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) eventfd2(0x1f, 0x80001) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x7, @win={{0x101, 0x2, 0x10000, 0x8}, 0x7, 0x9, &(0x7f00000000c0)={{0x0, 0x3, 0x5, 0x7}, &(0x7f0000000040)={{0x2, 0x1, 0xf327, 0xfff}, &(0x7f0000000000)={{0x2, 0x8, 0x2ee, 0x5}}}}, 0x2, &(0x7f0000000140)="28cccecd8e287f8283e7f5d41d4e221f03efff64cffcbc46ea81b07ab75ef99528432cced151e5f4fe9f7e38730aac4f3a68efce1f33fa3107b126f7b97f1ad7fd20def6dceb6c8d417e9787b75965865d23e2240b50b62cc7f86b2e15940706bf14bdbea9d81af94b74fabb4f7dedd4202def013ebd6924f82dc5edade64b2e4e9d2160ec9cd23db80b4f209d8925812af74f311906646e4e233c27561631dc654bed756037c0a7d81ef971d0a609", 0x7}}) 05:33:19 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x7e, &(0x7f00000017c0)) [ 3126.353694][T12574] BUG: Bad rss-counter state mm:ffff88807aef15c0 type:MM_ANONPAGES val:5 05:33:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0xe7ff}}) 05:33:19 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5451, 0x0) 05:33:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x40086602, 0x0) 05:33:19 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$video(&(0x7f0000000280), 0xcd, 0x6102) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000380)={0x2, "6c067713ead6e0d138e6bac08c6cf01af45e22b975cca6e7027df018f86b69b8", 0x3, 0x80000000, 0x5, 0x0, 0x40000, 0x8}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:19 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001440)='./binderfs2/binder-control\x00', 0x2, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = eventfd(0x8000) io_submit(0x0, 0x8, &(0x7f0000001800)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x2, r1, &(0x7f0000000180)="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", 0xfe, 0x0, 0x0, 0x0, r0}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x7ff, r0, &(0x7f00000002c0)="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", 0x1000, 0x6, 0x0, 0x1, r0}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x7f, r2, &(0x7f0000001300)="d1b941e7c7e608a3a6a0b20633af8b011616afc236eaf04b4745b2a1af331d8a15c8f44b957adeaa01b66a7ee21ae3d49f8f8878f5b52f0f1d1d5a2d971ecb7c63a23f86a1627317194e13f75026524f7883d9e166ac43788d54c8fe5742016c36ddd40087c505dc8c1852d5beb407447467d46e92a39b8f22ea3adebd274576f5062277980e106f55da6a943120a4c75b1c77049d3019d9819f5a302a89237e285e5d4ebb87ac3a1f9d1e7fecb1e0d74ff9723b79650cc70d47deaadf6f92287131180023210a23986b67d3", 0xcc, 0x8, 0x0, 0x3, r0}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x3, 0x326, r3, &(0x7f0000001480)="6810d9546d95d5501eee45c889a1eac71cfba324575fadee47468bc7a55cc6fabd875bd0c4bc526b9491b8acc1f50da96aff5b603ab8881360d2f6610d", 0x3d, 0x4e, 0x0, 0x3, r4}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000001500)="4b46ac35066578115a14abfe603dca758fe6178ddaa1e0d6db074628ce0305580ebf70cc50fc8060caaca71badd7dc36fe58b46ae5fc8acaada46371616b55f67d1364198bd1588ac611ad5f0016da9ea3aa44d2c7a9e4f363fc019fb3cef1ba956312714a8ca9c0", 0x68, 0x1, 0x0, 0x2}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f00000015c0)="609cffd80871818b0fd6c13ac386d9dc49abdc8acce429c9609925d4698b59c74ba83b782f100ba05a3c55460e577fa3d985fa", 0x33, 0xe5ff, 0x0, 0x2, r0}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000001640)="708ce050232a449a9a87f731476f5b132fc8409926d1835ab8775786e8fc1e7e95c3e7a613a19fea1ef5b28aefc043b6a2dd11f02e27a7e049bb58e0bc73bef3f8e9730f8962d177a1924b8ae485066b927346a24cd956e19d30497d", 0x5c, 0x3, 0x0, 0x1, r0}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6, 0x2, r5, &(0x7f0000001700)="9327b89e2866bdf0c35803859ccc00cdf8fce6588285d96b7697b321bd7ab368fcd95dd9d363674670a8bee14130d81f223c0d55f0223c62d0aeb2dc21db68b4f14400d98f606b0219d7bc230944a9891e04733cd23f24326e53686436def9fc707376400d0c1c6ad9e02b401eba875b0f0b5ff088ed429cff2c55eb4fa7b2d540", 0x81, 0x0, 0x0, 0x0, r0}]) read$eventfd(r0, &(0x7f0000000100), 0x8) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001840)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x20040044}, 0x40001) 05:33:19 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x100000, &(0x7f00000017c0)) 05:33:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x401c5820, 0x0) 05:33:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0xfdfd}}) 05:33:19 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, 0x0) 05:33:19 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001440)='./binderfs2/binder-control\x00', 0x2, 0x0) (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = eventfd(0x8000) io_submit(0x0, 0x8, &(0x7f0000001800)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x2, r1, &(0x7f0000000180)="cfa5ee5f33e3bb01f37233f8b3353e40e26ab67ef363f9449c0988d63e9159b7d2a5dbe53bf4418191e7c4c46494c5d783ad576104ede31833ad63a3b7ebe422b9222bb62c9b54925a123c47e684572144838a93ea692d64ecc27440e8798c778b6226fcc7a49b4d1f1ee3ffa7866126900da5d97c12c67d511ac2c21125fea807bf10f0c808ead1a0fc086f5a92c9b59ce74fc4c5daf2f31a81193a60c6fc58c25c88e68a91de36fc5ceecda585e1db2ddb2660608c5af804109362af09d7c206a403be5e6d16b7388696ed80d2ab83c67cae5f94d09f9afe394c9e3d3e74d091344ba34c0906d92aa6c36aabbb9b3681a15ace7e5a5b9d4c6158ae51d2", 0xfe, 0x0, 0x0, 0x0, r0}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x7ff, r0, &(0x7f00000002c0)="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", 0x1000, 0x6, 0x0, 0x1, r0}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x7f, r2, &(0x7f0000001300)="d1b941e7c7e608a3a6a0b20633af8b011616afc236eaf04b4745b2a1af331d8a15c8f44b957adeaa01b66a7ee21ae3d49f8f8878f5b52f0f1d1d5a2d971ecb7c63a23f86a1627317194e13f75026524f7883d9e166ac43788d54c8fe5742016c36ddd40087c505dc8c1852d5beb407447467d46e92a39b8f22ea3adebd274576f5062277980e106f55da6a943120a4c75b1c77049d3019d9819f5a302a89237e285e5d4ebb87ac3a1f9d1e7fecb1e0d74ff9723b79650cc70d47deaadf6f92287131180023210a23986b67d3", 0xcc, 0x8, 0x0, 0x3, r0}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x3, 0x326, r3, &(0x7f0000001480)="6810d9546d95d5501eee45c889a1eac71cfba324575fadee47468bc7a55cc6fabd875bd0c4bc526b9491b8acc1f50da96aff5b603ab8881360d2f6610d", 0x3d, 0x4e, 0x0, 0x3, r4}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000001500)="4b46ac35066578115a14abfe603dca758fe6178ddaa1e0d6db074628ce0305580ebf70cc50fc8060caaca71badd7dc36fe58b46ae5fc8acaada46371616b55f67d1364198bd1588ac611ad5f0016da9ea3aa44d2c7a9e4f363fc019fb3cef1ba956312714a8ca9c0", 0x68, 0x1, 0x0, 0x2}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f00000015c0)="609cffd80871818b0fd6c13ac386d9dc49abdc8acce429c9609925d4698b59c74ba83b782f100ba05a3c55460e577fa3d985fa", 0x33, 0xe5ff, 0x0, 0x2, r0}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000001640)="708ce050232a449a9a87f731476f5b132fc8409926d1835ab8775786e8fc1e7e95c3e7a613a19fea1ef5b28aefc043b6a2dd11f02e27a7e049bb58e0bc73bef3f8e9730f8962d177a1924b8ae485066b927346a24cd956e19d30497d", 0x5c, 0x3, 0x0, 0x1, r0}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6, 0x2, r5, &(0x7f0000001700)="9327b89e2866bdf0c35803859ccc00cdf8fce6588285d96b7697b321bd7ab368fcd95dd9d363674670a8bee14130d81f223c0d55f0223c62d0aeb2dc21db68b4f14400d98f606b0219d7bc230944a9891e04733cd23f24326e53686436def9fc707376400d0c1c6ad9e02b401eba875b0f0b5ff088ed429cff2c55eb4fa7b2d540", 0x81, 0x0, 0x0, 0x0, r0}]) (async, rerun: 32) read$eventfd(r0, &(0x7f0000000100), 0x8) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001840)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf2507000000060000000000000000000200010000001400080076657468305f766972745f776966690008001100010000002dd71fb00bd51310e47e29d91e7dcb816357c8a7a57fe3de5c78db0a4846c86d5dfb4a5a9b8a56089cd3042f462615c0687e6fd348e832b85b383369cb0c95e980a547aa18e2ba0030f1613d9c18f534875dd25db5c865f39900c197bacef1246068101a44ccaff199401a1b982102597ffe42c537ec26078af5dbc03ec54ce3d8e350851391448afdf3780c1d67bf59639d100ba9e10a293738aeec843cc7dfae7be84e0f30afc8b7bf7f13f8c40ca9bd83c46703b98b8a15c3da0c9b904effe592e030252b02b8087674711f23373d2721aa746e99471157ec721b49426cfbf061f6b41d8b3b28ccde2bac8a6a39ae1c9dffd29eed2e5398eb192dd4b97db7684f4fc116756d4c39c438319e20a5065d98119ffd7bb67137748cdadd72732297af0099d396ec07d9bf80c1a068edcd8199cda7ca276ba62cc6179ec9cd1e43631cd27d"], 0x40}, 0x1, 0x0, 0x0, 0x20040044}, 0x40001) 05:33:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x4020940d, 0x0) 05:33:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0xff00}}) 05:33:19 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5460, 0x0) 05:33:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x80086301, 0x0) 05:33:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0xffe7}}) 05:33:19 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$video(&(0x7f0000000280), 0xcd, 0x6102) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000380)={0x2, "6c067713ead6e0d138e6bac08c6cf01af45e22b975cca6e7027df018f86b69b8", 0x3, 0x80000000, 0x5, 0x0, 0x40000, 0x8}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) (async, rerun: 32) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async, rerun: 32) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:19 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) io_destroy(r0) 05:33:19 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x8933, 0x0) 05:33:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x80086601, 0x0) 05:33:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x1000000}}) 05:33:19 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001440)='./binderfs2/binder-control\x00', 0x2, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = eventfd(0x8000) io_submit(0x0, 0x8, &(0x7f0000001800)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x2, r1, &(0x7f0000000180)="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", 0xfe, 0x0, 0x0, 0x0, r0}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x7ff, r0, &(0x7f00000002c0)="646601511233bdbef1bd8c5ca44a9320b5e10a9872e123af279857fb1782b9108fd82327fde602b60a1fb54c514eedf35a6e69f6899d7e9f50c9ce5fed0bc3cf1005fbc49004dfb29911c8b8ac9260833021a20bdb7d054559cab4ad466067397b8ce193b47bb539179c25c126d8e001394e72780cd2bafc67a054377baf910087f242368bb9d8e003939822101307b6204f1b4e6719644942751e716e0059f6738e9dd4d8eaabb778110a9e46c72da90a5e2186731c4afe78ceb3518b40770798cb31bdc8b561e41957b163cf796d69a5fee134c2ebd8f362249bd1d567f340abf43f411f0405ebc49e0bc175560ddc95649089c2869742cfaaa65970dbcf43af2b87d1a9e228d4c3238ef7d627f9c86b9e2f9ba1b7d5698f296344eed047a1025a0490f53b77a3dfb01548356884b5ea77b67ca20dff78d7ba669278a07dc736006d399b78fcb2820ccac2d2210476054e46dd2f4782d315925564c135699f1489d874b0b66340399a4c45940a24cbce416464410bddb926fab5586f897c98ec1e702c9a3789e697bb32af49b8f77884de1487ba164dc34a30f885e58554ef2fadc7a7b08e152ceedec23e905200007dd4b42ee17dc428c93f8f5cb8098a3ece08062946840c120763a0534d94b0d2996180cda4187a26bf0c4bcce4e8b3cd30a256a3914ad16384415a982ec43598c58ccf6c1d466466781f960fd108b9bce56d27962ec645f6afe661dee006c850155aae4e4e5741bda563bd8d3123c53606df6ec1cfed5b227395038eebb13af25d9d9085315009f5fe3b4e62aa8d17d68799c116c285f4b249b467782494e28f72ffa5b6f69beffbbe8d38152075a469dc06a05811ec057490a1effaaf55551f811e224b56d4658ad9909663c84d1ab4a4f269614b43c1e7d9dc4706a65c7dd6075615fac919d6dab0661a1fbb0c87077d7fa3a48c9ac8e6d412e9a41846088411d2b8a225b6d36ef6a38b089ef78b7c8d5e6769a996b6dbc5ef01b534990bc38c418012fc018073b25c9a1c02df9437c4dc980b877df87db9582f5ce0ec9ed41c4cf0bebcf69413d8a3b2c99887baa8276361a856c9fddd7782bdddd7feb2c31b07f49ab279c5bdc56337ed1f570e611b46187704af3c5b1557c68d069e8d6b35e71431aca8e0be460e67d9f6def2e6e79cdfb089363bce940afcc3b9b769ac3b1723849d5ac7c45cef0ed853f3d891bbfad14f991f6fb31f4c850f3d193d0f070ca2420fe656959ef4e6ddcaf6f6587985ae1886cd78453aefd9cbcc4d03052b5a6e0b6f4bbc99a13f6fbfa72423b3d7758fb073c6cb59e67a28ed41c0838d55c35dd2eb0f6ddd792977abda81e51d0ee946695988f60c0942e92012c3c259bef1c2a9748650ddd57a48703fb131f8e2fd6d1a4a85e7182fe40ce4d4f9581916d9645321d44043aeb1dd14e134dcce81e4f3a14cd22383f19be1421b9987377ddc9143261af1c71c06de75e7613c81cb21313b1fbe8bcd2165b78581cf29a7c39b14bd8f7ed5fb686123ab75ba6bbd0e8b8ba67b7d0c64ffa1a6959d2b77b873b708fcf6ee9db4ed2b1acdcc72744f1962ae514ae25177aabdceeedf1c44edec6a481fa6dbdd1416ddd9b632025043ee76cd722f6b09c92ba282d18f05e954f60a0ae06890c3778089518358e3248a9eed71309164fd054d09b893538ab495b37c2b864c63c289e71f904962e5295f93f61b6ebff184fe7f6923260030a1673c30349d3ebe13cf9d9fa6b26e2d77674b27530ded366d29ba1d81efcdbc87394ef7f837342160977e4a04c7f15c01d698ba7df1edeabb14569756f55aeab8eda03a861957204119267da47f3aa6151595e5453adaddf6b6b61ebc130ef224c9c34c342d3c9f323e29bc81b9651507ee845ca79b3a87fc8f5397bd0397138e8809ff4a479c1091e507b26a3f1c57d49f1bd55f5fc5f4cb1436ab08f1cc7f358f570dfd60cb10a016dae2abed45ed7d603404e14dcee336f36bdd6adf54bf6e852b02a77a1a0f2a50d7927b79b081ebd0f0d5ba9417a45e57817c4c0b3bc28f5fa2c1710e8b582859f55ce10b872b1b6f8f84cbc5a5bb16e2d66c2ecd639ff4316c35382b55158723f36546ee1df7881beceb48ba6ab6034ebe766a73ff7133a2c1b933c258a9d00e6929dc2913f0705faedda86bfd007a4612a737458774e95699f68d69005bc7343dcd4331774007c6d6e7a4dfa24e2c4a5c109db742fd00d306588ebac12abacc31fe8efcc440ea07c631677fb323b8612236a056b3be2e1dc7e9afc96f7acbaa4131ac9f3774e1106cfda0971abf938380e9f586d8a48f517bad18857ab7bbe81b1521f052080101b189481c1f56ddc17c92682cbd6f9541fb49c170cca4de9f548e88e099c07d7c11b6a822f8277429f17d2718a4283a5f87f9d2b182b4584c829b49197eb012a9c15113bcf0ddd0d317c34ac027cb1907d9d8a472a083d02dc0af2361d0b4e3e3a739a867975edeb2c57637d6f3064b7f25f7cbb14a2e2e83d710f9c35723fcd29032eac42656af1e1821bc30b3c88624dbd963f4cfc08a6165a3f1992bb1d47d4db5644c5b8559469d61f4436119a743f70b84e29eb51ecaea03c20ce4ba644cfb5a667bf12f5474e9b2ed5bb94c7939febf689ba013bb36ab27fd92b2b594c7d845da9cb32a8e214297270689f061824bf316f8b75bd9ba0024692f2deeb92536c0e8f262706d7206d82930e277d1c44de6b784bc5294067efe4cce41c45e199da3e4fcf8c8343237119220f32848867b5bfe4533890c7cdc5cbc437079c85634e65898a54dc98ff88b8d1599b4406ab7bfb2dfcc91f3abb6c2b190ada52b4e0cba257355d7763b0a2b8f78213f390ee54eb4c377c1afb64440efe858dfd63b55e08ce256a986af00241c3486e7839f940240761d4fafa47af92d435bce3716a8a79e09b0e5a260ce947154391fe240b385e1ba62e2a84cace44f123bea34942e40c6ee99a203dd405576c27d185d25052e1dbf25c13dbd9ec6dc014c29ab2716a72b669b1a5acedee36d85069c0c2ebd65afdbf77b5fccef86c89e4690b63869efd3b847e4a636ca9edbab2c2dc1c07ec57ba91d1d3d9e7195d4ed70cd7e98f6b4656aa874b3b73d1e54ff8c70e225034c6c5476c3737564e3b0c995d539b4831cf21804c60d8c65d1e295e700cb43034d6cd34f6036e4a5197be01e9ab5f1f3ffdbd235a953703d1fee6eff42e62797cd2af1183476caca930b29389ebb4bc48e71aceaeceba0336c599411923e5e3527910e96aef6094b493d9ae5989045f0a8bf3153ed22c768c4b9540f75d610ee4d1a3f8d80136210f1f541081c02897a5bed791941946dc3e4ba421986695a8bf9f1111dc726dbee3a18cde679eaed58f0f34415d5df56df5af68fc9d24d87017a9bfa26257cc072cf7d9836da1959e422b10a6051c2fd2ee4c92ab8eed4ae44edd1716d65ae91398daac0669179bd1ae4416cd8719226515ff08d3aea067d585e50057e64ab5fdf3ab007b52038ba6bdde8207f05e5b60d8bea39b9f65784a89a14aa74de810db1ce011083a1250204eb3fcf44bcd33cbcce495e57f05f03d7aa849824cab0d16e89ed30335d5c83ca7cc922ba4c66aedc5db4fe52812437a7c2d4a435f668c7fdf0afca0dd9e873448dbf375c603eee94d85fd74f25024704a2878bc24799d989195467fa3ac3e2cb14c06f1603bc1d8d9f6a1680422be8d82e1e643ac8f7d9aeb2cc1322f0c2be3a17dc47baa37726ff0b6f9eb469197fef99661193c57a594f0c9e515e01e8f62fa0844ce0c8864a54e323b6b8191bccdec5dd14ed099e6ee27df60414ec8202ee0adb6b147143efe6b04f28d8c3b67fec38a4662d162f30ed2d603db6e5111d2483c5ec20d8338a434cc0b7a4c14ef5201bb8e09bded2d43cd62a30ca702fc0737b525c8f1b144cac8d7a2d3e4561a3c780945cec815b44d191bcba2bd68955b83d142d0dd882edefc38979a116835fcf37d040e62dc2ca918c2749d48b36a8539adbd86b4283ce99df8597cad91debc0b1600f979245e40710b97e710416f547e074bd3516b7d6f8788854aae0625ab0f606d8a38dce87b198c9a3b43c8def7749da085126692b450846dda5614ef7e6cc2673f6b1acc2703da5543745ae0927afcab9feb68ce21e0961adc73412d74349df11ccf32b963c4a252cd3baa29528cb3ff655827761529dc0108b7d460efce01bf9323a4c312aff7d35a2c3b10f6fdf7cb93c0c6c0f8be3bd2a10046d1397c07eeb129c98a559c0e4f792be1a3318d22519315ddc00b80600e21e9e1f73ad45edc0c13dac4dd9574ee0bfb7027c8809ec6dce7fa8ada3c21ef6a43254e1b408429391b9386128a0ca3e9ad9d1ef3db8584f46cbe4cf567bc6e03f2b0fde42684450b7ed50359c9af00939efdb22d60080a4cc6bcf02b3516e106fd108eea0cc799887e6e72560e5a8bcb106642dd77a18c0250a3baae465971b24d97335b24bee10ffb9ee661cf5d254b78ed49285a50383d3359f419bd014f579398db3acae3a8d01988f15fc72705be88a16ddec03b9f5158911b936a761a56efea37bc346307abe4c5b25131fb0e2004d3c8126d928d69ca9604b3c999d329fbb42a0a8d5f00f7eb666bc1b29351b2bf9fb9cb31c0c5eb498e7ed887d779c10ad8bf8f9f5e61322cfccbe7eaf0b14cea1a10d7d89b00132042d93fd297f26a47637eeb42c6f1983feaf95db04ffd5dcb64f786579f4626bc4437bade9586fffe9cff10af598f32e189f20a580ac91516feb835994c4d36bcb39fdc217c82e4e9a93a3a26b5d6d2627afa0936f0b9ae7f826c02bb5f9867109d4d7e8e95f49d235663465a7bafeeee7d5cd370baf6ca65a81c7cf8e245a5382888746a28d9c2dd47a9544e6b59b16191aa751544e86f9902fd493206c70a3b86f878d85c61a3c4be5c7d3f2dc5d83e310c252ff4a16e2fced1bc49d4f81a02777a02d5afd56444e45224d4c4c1f88496cd189e2eed5784dc56a50738fefc50b9984c57dd7fc503dd03ee6932dd951e02f2438adaa4a57b342b3c438ec3b9599301e5b3fc0969215af9eee9982e23c7e3657927b5f21ea5585a6ce30e6ac26f00d3b78982e0fd949c9e639e36506ff046a9d3b92e0ea2d1a1ce7c3300fca510b195827a662cb2f70e299c8465586111819135410f887e550161bac8ed82becced45263b166afcc3bdadbc96e488b3fa96bfc77b328fa23a424a3edbdf701cad2b62b49fdecee97b638c33014dedc47a3b7242136abc68b09f65195c48b8106e51bcdf8c065bd57027fcfa10cb9f3578bdecf6c36417821a078bc41ecb30167be8ef528ea1a6ef05531a067b3ad4e3b8e8d9496ffaeb4e519e1cbc851d02055278a07a19dd7680e050171198b019088542095f736d8c086671bbd429f894362629965cb99531848fb2f06faf4b2aa87f0bf443e0b22c0e4ce96d57717701f8c9dca72f130aefedc2df62d7cbf4065628dac2965adb35a09d4e67d024541199fe7f2f21bb22ff197b81315ddaa4331991dc9980832ba306dd17e60227948878b3fab173dd3379cfd1d3fcb471ca85c2a9c64af56638742651bb43f54bed1b450832418e5cf2228e3f2952f9986b1261969f35cabf68f3e5e83399258f4e84aa781a07a3ce964f9601ead99bcf232b1a8b586ae3d035b4db67ec3ab849a932bfd2b62c7b8cc8014ae88d5dd64fceba1e83d8cc501d756c0c8711d002e8b0d01d1c315d336239cdc895fae25b17dece6396fcfdc5cf023d1f83eda94", 0x1000, 0x6, 0x0, 0x1, r0}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x7f, r2, &(0x7f0000001300)="d1b941e7c7e608a3a6a0b20633af8b011616afc236eaf04b4745b2a1af331d8a15c8f44b957adeaa01b66a7ee21ae3d49f8f8878f5b52f0f1d1d5a2d971ecb7c63a23f86a1627317194e13f75026524f7883d9e166ac43788d54c8fe5742016c36ddd40087c505dc8c1852d5beb407447467d46e92a39b8f22ea3adebd274576f5062277980e106f55da6a943120a4c75b1c77049d3019d9819f5a302a89237e285e5d4ebb87ac3a1f9d1e7fecb1e0d74ff9723b79650cc70d47deaadf6f92287131180023210a23986b67d3", 0xcc, 0x8, 0x0, 0x3, r0}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x3, 0x326, r3, &(0x7f0000001480)="6810d9546d95d5501eee45c889a1eac71cfba324575fadee47468bc7a55cc6fabd875bd0c4bc526b9491b8acc1f50da96aff5b603ab8881360d2f6610d", 0x3d, 0x4e, 0x0, 0x3, r4}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000001500)="4b46ac35066578115a14abfe603dca758fe6178ddaa1e0d6db074628ce0305580ebf70cc50fc8060caaca71badd7dc36fe58b46ae5fc8acaada46371616b55f67d1364198bd1588ac611ad5f0016da9ea3aa44d2c7a9e4f363fc019fb3cef1ba956312714a8ca9c0", 0x68, 0x1, 0x0, 0x2}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f00000015c0)="609cffd80871818b0fd6c13ac386d9dc49abdc8acce429c9609925d4698b59c74ba83b782f100ba05a3c55460e577fa3d985fa", 0x33, 0xe5ff, 0x0, 0x2, r0}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000001640)="708ce050232a449a9a87f731476f5b132fc8409926d1835ab8775786e8fc1e7e95c3e7a613a19fea1ef5b28aefc043b6a2dd11f02e27a7e049bb58e0bc73bef3f8e9730f8962d177a1924b8ae485066b927346a24cd956e19d30497d", 0x5c, 0x3, 0x0, 0x1, r0}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6, 0x2, r5, &(0x7f0000001700)="9327b89e2866bdf0c35803859ccc00cdf8fce6588285d96b7697b321bd7ab368fcd95dd9d363674670a8bee14130d81f223c0d55f0223c62d0aeb2dc21db68b4f14400d98f606b0219d7bc230944a9891e04733cd23f24326e53686436def9fc707376400d0c1c6ad9e02b401eba875b0f0b5ff088ed429cff2c55eb4fa7b2d540", 0x81, 0x0, 0x0, 0x0, r0}]) read$eventfd(r0, &(0x7f0000000100), 0x8) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001840)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x20040044}, 0x40001) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001440)='./binderfs2/binder-control\x00', 0x2, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r4, 0x0, 0x0) (async) eventfd(0x8000) (async) io_submit(0x0, 0x8, &(0x7f0000001800)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x2, r1, &(0x7f0000000180)="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", 0xfe, 0x0, 0x0, 0x0, r0}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x7ff, r0, &(0x7f00000002c0)="646601511233bdbef1bd8c5ca44a9320b5e10a9872e123af279857fb1782b9108fd82327fde602b60a1fb54c514eedf35a6e69f6899d7e9f50c9ce5fed0bc3cf1005fbc49004dfb29911c8b8ac9260833021a20bdb7d054559cab4ad466067397b8ce193b47bb539179c25c126d8e001394e72780cd2bafc67a054377baf910087f242368bb9d8e003939822101307b6204f1b4e6719644942751e716e0059f6738e9dd4d8eaabb778110a9e46c72da90a5e2186731c4afe78ceb3518b40770798cb31bdc8b561e41957b163cf796d69a5fee134c2ebd8f362249bd1d567f340abf43f411f0405ebc49e0bc175560ddc95649089c2869742cfaaa65970dbcf43af2b87d1a9e228d4c3238ef7d627f9c86b9e2f9ba1b7d5698f296344eed047a1025a0490f53b77a3dfb01548356884b5ea77b67ca20dff78d7ba669278a07dc736006d399b78fcb2820ccac2d2210476054e46dd2f4782d315925564c135699f1489d874b0b66340399a4c45940a24cbce416464410bddb926fab5586f897c98ec1e702c9a3789e697bb32af49b8f77884de1487ba164dc34a30f885e58554ef2fadc7a7b08e152ceedec23e905200007dd4b42ee17dc428c93f8f5cb8098a3ece08062946840c120763a0534d94b0d2996180cda4187a26bf0c4bcce4e8b3cd30a256a3914ad16384415a982ec43598c58ccf6c1d466466781f960fd108b9bce56d27962ec645f6afe661dee006c850155aae4e4e5741bda563bd8d3123c53606df6ec1cfed5b227395038eebb13af25d9d9085315009f5fe3b4e62aa8d17d68799c116c285f4b249b467782494e28f72ffa5b6f69beffbbe8d38152075a469dc06a05811ec057490a1effaaf55551f811e224b56d4658ad9909663c84d1ab4a4f269614b43c1e7d9dc4706a65c7dd6075615fac919d6dab0661a1fbb0c87077d7fa3a48c9ac8e6d412e9a41846088411d2b8a225b6d36ef6a38b089ef78b7c8d5e6769a996b6dbc5ef01b534990bc38c418012fc018073b25c9a1c02df9437c4dc980b877df87db9582f5ce0ec9ed41c4cf0bebcf69413d8a3b2c99887baa8276361a856c9fddd7782bdddd7feb2c31b07f49ab279c5bdc56337ed1f570e611b46187704af3c5b1557c68d069e8d6b35e71431aca8e0be460e67d9f6def2e6e79cdfb089363bce940afcc3b9b769ac3b1723849d5ac7c45cef0ed853f3d891bbfad14f991f6fb31f4c850f3d193d0f070ca2420fe656959ef4e6ddcaf6f6587985ae1886cd78453aefd9cbcc4d03052b5a6e0b6f4bbc99a13f6fbfa72423b3d7758fb073c6cb59e67a28ed41c0838d55c35dd2eb0f6ddd792977abda81e51d0ee946695988f60c0942e92012c3c259bef1c2a9748650ddd57a48703fb131f8e2fd6d1a4a85e7182fe40ce4d4f9581916d9645321d44043aeb1dd14e134dcce81e4f3a14cd22383f19be1421b9987377ddc9143261af1c71c06de75e7613c81cb21313b1fbe8bcd2165b78581cf29a7c39b14bd8f7ed5fb686123ab75ba6bbd0e8b8ba67b7d0c64ffa1a6959d2b77b873b708fcf6ee9db4ed2b1acdcc72744f1962ae514ae25177aabdceeedf1c44edec6a481fa6dbdd1416ddd9b632025043ee76cd722f6b09c92ba282d18f05e954f60a0ae06890c3778089518358e3248a9eed71309164fd054d09b893538ab495b37c2b864c63c289e71f904962e5295f93f61b6ebff184fe7f6923260030a1673c30349d3ebe13cf9d9fa6b26e2d77674b27530ded366d29ba1d81efcdbc87394ef7f837342160977e4a04c7f15c01d698ba7df1edeabb14569756f55aeab8eda03a861957204119267da47f3aa6151595e5453adaddf6b6b61ebc130ef224c9c34c342d3c9f323e29bc81b9651507ee845ca79b3a87fc8f5397bd0397138e8809ff4a479c1091e507b26a3f1c57d49f1bd55f5fc5f4cb1436ab08f1cc7f358f570dfd60cb10a016dae2abed45ed7d603404e14dcee336f36bdd6adf54bf6e852b02a77a1a0f2a50d7927b79b081ebd0f0d5ba9417a45e57817c4c0b3bc28f5fa2c1710e8b582859f55ce10b872b1b6f8f84cbc5a5bb16e2d66c2ecd639ff4316c35382b55158723f36546ee1df7881beceb48ba6ab6034ebe766a73ff7133a2c1b933c258a9d00e6929dc2913f0705faedda86bfd007a4612a737458774e95699f68d69005bc7343dcd4331774007c6d6e7a4dfa24e2c4a5c109db742fd00d306588ebac12abacc31fe8efcc440ea07c631677fb323b8612236a056b3be2e1dc7e9afc96f7acbaa4131ac9f3774e1106cfda0971abf938380e9f586d8a48f517bad18857ab7bbe81b1521f052080101b189481c1f56ddc17c92682cbd6f9541fb49c170cca4de9f548e88e099c07d7c11b6a822f8277429f17d2718a4283a5f87f9d2b182b4584c829b49197eb012a9c15113bcf0ddd0d317c34ac027cb1907d9d8a472a083d02dc0af2361d0b4e3e3a739a867975edeb2c57637d6f3064b7f25f7cbb14a2e2e83d710f9c35723fcd29032eac42656af1e1821bc30b3c88624dbd963f4cfc08a6165a3f1992bb1d47d4db5644c5b8559469d61f4436119a743f70b84e29eb51ecaea03c20ce4ba644cfb5a667bf12f5474e9b2ed5bb94c7939febf689ba013bb36ab27fd92b2b594c7d845da9cb32a8e214297270689f061824bf316f8b75bd9ba0024692f2deeb92536c0e8f262706d7206d82930e277d1c44de6b784bc5294067efe4cce41c45e199da3e4fcf8c8343237119220f32848867b5bfe4533890c7cdc5cbc437079c85634e65898a54dc98ff88b8d1599b4406ab7bfb2dfcc91f3abb6c2b190ada52b4e0cba257355d7763b0a2b8f78213f390ee54eb4c377c1afb64440efe858dfd63b55e08ce256a986af00241c3486e7839f940240761d4fafa47af92d435bce3716a8a79e09b0e5a260ce947154391fe240b385e1ba62e2a84cace44f123bea34942e40c6ee99a203dd405576c27d185d25052e1dbf25c13dbd9ec6dc014c29ab2716a72b669b1a5acedee36d85069c0c2ebd65afdbf77b5fccef86c89e4690b63869efd3b847e4a636ca9edbab2c2dc1c07ec57ba91d1d3d9e7195d4ed70cd7e98f6b4656aa874b3b73d1e54ff8c70e225034c6c5476c3737564e3b0c995d539b4831cf21804c60d8c65d1e295e700cb43034d6cd34f6036e4a5197be01e9ab5f1f3ffdbd235a953703d1fee6eff42e62797cd2af1183476caca930b29389ebb4bc48e71aceaeceba0336c599411923e5e3527910e96aef6094b493d9ae5989045f0a8bf3153ed22c768c4b9540f75d610ee4d1a3f8d80136210f1f541081c02897a5bed791941946dc3e4ba421986695a8bf9f1111dc726dbee3a18cde679eaed58f0f34415d5df56df5af68fc9d24d87017a9bfa26257cc072cf7d9836da1959e422b10a6051c2fd2ee4c92ab8eed4ae44edd1716d65ae91398daac0669179bd1ae4416cd8719226515ff08d3aea067d585e50057e64ab5fdf3ab007b52038ba6bdde8207f05e5b60d8bea39b9f65784a89a14aa74de810db1ce011083a1250204eb3fcf44bcd33cbcce495e57f05f03d7aa849824cab0d16e89ed30335d5c83ca7cc922ba4c66aedc5db4fe52812437a7c2d4a435f668c7fdf0afca0dd9e873448dbf375c603eee94d85fd74f25024704a2878bc24799d989195467fa3ac3e2cb14c06f1603bc1d8d9f6a1680422be8d82e1e643ac8f7d9aeb2cc1322f0c2be3a17dc47baa37726ff0b6f9eb469197fef99661193c57a594f0c9e515e01e8f62fa0844ce0c8864a54e323b6b8191bccdec5dd14ed099e6ee27df60414ec8202ee0adb6b147143efe6b04f28d8c3b67fec38a4662d162f30ed2d603db6e5111d2483c5ec20d8338a434cc0b7a4c14ef5201bb8e09bded2d43cd62a30ca702fc0737b525c8f1b144cac8d7a2d3e4561a3c780945cec815b44d191bcba2bd68955b83d142d0dd882edefc38979a116835fcf37d040e62dc2ca918c2749d48b36a8539adbd86b4283ce99df8597cad91debc0b1600f979245e40710b97e710416f547e074bd3516b7d6f8788854aae0625ab0f606d8a38dce87b198c9a3b43c8def7749da085126692b450846dda5614ef7e6cc2673f6b1acc2703da5543745ae0927afcab9feb68ce21e0961adc73412d74349df11ccf32b963c4a252cd3baa29528cb3ff655827761529dc0108b7d460efce01bf9323a4c312aff7d35a2c3b10f6fdf7cb93c0c6c0f8be3bd2a10046d1397c07eeb129c98a559c0e4f792be1a3318d22519315ddc00b80600e21e9e1f73ad45edc0c13dac4dd9574ee0bfb7027c8809ec6dce7fa8ada3c21ef6a43254e1b408429391b9386128a0ca3e9ad9d1ef3db8584f46cbe4cf567bc6e03f2b0fde42684450b7ed50359c9af00939efdb22d60080a4cc6bcf02b3516e106fd108eea0cc799887e6e72560e5a8bcb106642dd77a18c0250a3baae465971b24d97335b24bee10ffb9ee661cf5d254b78ed49285a50383d3359f419bd014f579398db3acae3a8d01988f15fc72705be88a16ddec03b9f5158911b936a761a56efea37bc346307abe4c5b25131fb0e2004d3c8126d928d69ca9604b3c999d329fbb42a0a8d5f00f7eb666bc1b29351b2bf9fb9cb31c0c5eb498e7ed887d779c10ad8bf8f9f5e61322cfccbe7eaf0b14cea1a10d7d89b00132042d93fd297f26a47637eeb42c6f1983feaf95db04ffd5dcb64f786579f4626bc4437bade9586fffe9cff10af598f32e189f20a580ac91516feb835994c4d36bcb39fdc217c82e4e9a93a3a26b5d6d2627afa0936f0b9ae7f826c02bb5f9867109d4d7e8e95f49d235663465a7bafeeee7d5cd370baf6ca65a81c7cf8e245a5382888746a28d9c2dd47a9544e6b59b16191aa751544e86f9902fd493206c70a3b86f878d85c61a3c4be5c7d3f2dc5d83e310c252ff4a16e2fced1bc49d4f81a02777a02d5afd56444e45224d4c4c1f88496cd189e2eed5784dc56a50738fefc50b9984c57dd7fc503dd03ee6932dd951e02f2438adaa4a57b342b3c438ec3b9599301e5b3fc0969215af9eee9982e23c7e3657927b5f21ea5585a6ce30e6ac26f00d3b78982e0fd949c9e639e36506ff046a9d3b92e0ea2d1a1ce7c3300fca510b195827a662cb2f70e299c8465586111819135410f887e550161bac8ed82becced45263b166afcc3bdadbc96e488b3fa96bfc77b328fa23a424a3edbdf701cad2b62b49fdecee97b638c33014dedc47a3b7242136abc68b09f65195c48b8106e51bcdf8c065bd57027fcfa10cb9f3578bdecf6c36417821a078bc41ecb30167be8ef528ea1a6ef05531a067b3ad4e3b8e8d9496ffaeb4e519e1cbc851d02055278a07a19dd7680e050171198b019088542095f736d8c086671bbd429f894362629965cb99531848fb2f06faf4b2aa87f0bf443e0b22c0e4ce96d57717701f8c9dca72f130aefedc2df62d7cbf4065628dac2965adb35a09d4e67d024541199fe7f2f21bb22ff197b81315ddaa4331991dc9980832ba306dd17e60227948878b3fab173dd3379cfd1d3fcb471ca85c2a9c64af56638742651bb43f54bed1b450832418e5cf2228e3f2952f9986b1261969f35cabf68f3e5e83399258f4e84aa781a07a3ce964f9601ead99bcf232b1a8b586ae3d035b4db67ec3ab849a932bfd2b62c7b8cc8014ae88d5dd64fceba1e83d8cc501d756c0c8711d002e8b0d01d1c315d336239cdc895fae25b17dece6396fcfdc5cf023d1f83eda94", 0x1000, 0x6, 0x0, 0x1, r0}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x7f, r2, &(0x7f0000001300)="d1b941e7c7e608a3a6a0b20633af8b011616afc236eaf04b4745b2a1af331d8a15c8f44b957adeaa01b66a7ee21ae3d49f8f8878f5b52f0f1d1d5a2d971ecb7c63a23f86a1627317194e13f75026524f7883d9e166ac43788d54c8fe5742016c36ddd40087c505dc8c1852d5beb407447467d46e92a39b8f22ea3adebd274576f5062277980e106f55da6a943120a4c75b1c77049d3019d9819f5a302a89237e285e5d4ebb87ac3a1f9d1e7fecb1e0d74ff9723b79650cc70d47deaadf6f92287131180023210a23986b67d3", 0xcc, 0x8, 0x0, 0x3, r0}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x3, 0x326, r3, &(0x7f0000001480)="6810d9546d95d5501eee45c889a1eac71cfba324575fadee47468bc7a55cc6fabd875bd0c4bc526b9491b8acc1f50da96aff5b603ab8881360d2f6610d", 0x3d, 0x4e, 0x0, 0x3, r4}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000001500)="4b46ac35066578115a14abfe603dca758fe6178ddaa1e0d6db074628ce0305580ebf70cc50fc8060caaca71badd7dc36fe58b46ae5fc8acaada46371616b55f67d1364198bd1588ac611ad5f0016da9ea3aa44d2c7a9e4f363fc019fb3cef1ba956312714a8ca9c0", 0x68, 0x1, 0x0, 0x2}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f00000015c0)="609cffd80871818b0fd6c13ac386d9dc49abdc8acce429c9609925d4698b59c74ba83b782f100ba05a3c55460e577fa3d985fa", 0x33, 0xe5ff, 0x0, 0x2, r0}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000001640)="708ce050232a449a9a87f731476f5b132fc8409926d1835ab8775786e8fc1e7e95c3e7a613a19fea1ef5b28aefc043b6a2dd11f02e27a7e049bb58e0bc73bef3f8e9730f8962d177a1924b8ae485066b927346a24cd956e19d30497d", 0x5c, 0x3, 0x0, 0x1, r0}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6, 0x2, r5, &(0x7f0000001700)="9327b89e2866bdf0c35803859ccc00cdf8fce6588285d96b7697b321bd7ab368fcd95dd9d363674670a8bee14130d81f223c0d55f0223c62d0aeb2dc21db68b4f14400d98f606b0219d7bc230944a9891e04733cd23f24326e53686436def9fc707376400d0c1c6ad9e02b401eba875b0f0b5ff088ed429cff2c55eb4fa7b2d540", 0x81, 0x0, 0x0, 0x0, r0}]) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001840)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x20040044}, 0x40001) (async) 05:33:19 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x400448c9, 0x0) 05:33:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x801c581f, 0x0) 05:33:19 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) (async) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) io_destroy(r0) 05:33:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc0045878, 0x0) 05:33:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x2000000}}) 05:33:19 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x400448dd, 0x0) 05:33:20 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$video(&(0x7f0000000280), 0xcd, 0x6102) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000380)={0x2, "6c067713ead6e0d138e6bac08c6cf01af45e22b975cca6e7027df018f86b69b8", 0x3, 0x80000000, 0x5, 0x0, 0x40000, 0x8}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x0, 0x800) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_open_dev$video(&(0x7f0000000280), 0xcd, 0x6102) (async) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000380)={0x2, "6c067713ead6e0d138e6bac08c6cf01af45e22b975cca6e7027df018f86b69b8", 0x3, 0x80000000, 0x5, 0x0, 0x40000, 0x8}) (async) io_setup(0x101, &(0x7f0000000100)) (async) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) 05:33:20 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r0}) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:33:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc0045878, 0x0) 05:33:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x3000000}}) 05:33:20 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x400454ca, 0x0) 05:33:20 executing program 0: io_setup(0x6, &(0x7f0000000480)) (async) io_setup(0x8, &(0x7f00000017c0)) io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) io_destroy(r0) 05:33:20 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x40049409, 0x0) 05:33:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc0189436, 0x0) 05:33:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x4000000}}) 05:33:20 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r0}) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) 05:33:20 executing program 0: timer_gettime(0x0, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000480)) io_setup(0x5, &(0x7f0000000040)) io_setup(0x8, &(0x7f00000017c0)) socket$packet(0x11, 0x2, 0x300) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb) 05:33:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc020660b, 0x0) 05:33:20 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) read$fb(r3, &(0x7f00000000c0), 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:20 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x40086602, 0x0) 05:33:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x5000000}}) 05:33:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) 05:33:20 executing program 5: r0 = eventfd2(0x7fe000, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r0}) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0x7fe000, 0x0) (async) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffa081, 0x8) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r0}) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) 05:33:20 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x401c5820, 0x0) 05:33:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x6000000}}) 05:33:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x100) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f00000000c0)={{0x4, @name="8a2563c8541056d5bfaa3be989b899f509e9230b368824bbcbb390f53167999e"}, "b378d4e1c7e6bde0e3861f57604d3498615c8f6da127252c5b0e7dbbb1e6aa9d", 0x2}) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 05:33:20 executing program 0: timer_gettime(0x0, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000480)) (async) io_setup(0x5, &(0x7f0000000040)) (async) io_setup(0x8, &(0x7f00000017c0)) (async) socket$packet(0x11, 0x2, 0x300) (async) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb) 05:33:20 executing program 5: r0 = eventfd2(0x7fe000, 0x80001) write$eventfd(r0, &(0x7f0000000080)=0x2, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0x200, 0x80001) 05:33:20 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x4020940d, 0x0) 05:33:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x7000000}}) 05:33:20 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) (async) read$fb(r3, &(0x7f00000000c0), 0x0) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x100) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f00000000c0)={{0x4, @name="8a2563c8541056d5bfaa3be989b899f509e9230b368824bbcbb390f53167999e"}, "b378d4e1c7e6bde0e3861f57604d3498615c8f6da127252c5b0e7dbbb1e6aa9d", 0x2}) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 05:33:20 executing program 5: r0 = eventfd2(0x7fe000, 0x80001) write$eventfd(r0, &(0x7f0000000080)=0x2, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0x200, 0x80001) eventfd2(0x7fe000, 0x80001) (async) write$eventfd(r0, &(0x7f0000000080)=0x2, 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) eventfd2(0x200, 0x80001) (async) 05:33:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0xe7ffffff}}) 05:33:20 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x80086301, 0x0) 05:33:20 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) (async, rerun: 64) read$fb(r3, &(0x7f00000000c0), 0x0) (rerun: 64) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x100) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f00000000c0)={{0x4, @name="8a2563c8541056d5bfaa3be989b899f509e9230b368824bbcbb390f53167999e"}, "b378d4e1c7e6bde0e3861f57604d3498615c8f6da127252c5b0e7dbbb1e6aa9d", 0x2}) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 05:33:20 executing program 0: timer_gettime(0x0, &(0x7f0000000000)) (async) io_setup(0x6, &(0x7f0000000480)) io_setup(0x5, &(0x7f0000000040)) (async, rerun: 64) io_setup(0x8, &(0x7f00000017c0)) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb) 05:33:20 executing program 5: r0 = eventfd2(0x7fe000, 0x80001) write$eventfd(r0, &(0x7f0000000080)=0x2, 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) read$eventfd(r0, &(0x7f0000000100), 0x8) eventfd2(0x200, 0x80001) eventfd2(0x7fe000, 0x80001) (async) write$eventfd(r0, &(0x7f0000000080)=0x2, 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) (async) read$eventfd(r0, &(0x7f0000000100), 0x8) (async) eventfd2(0x200, 0x80001) (async) 05:33:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0xfdfdffff}}) 05:33:20 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x3, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:20 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x80086601, 0x0) 05:33:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x240040c0) 05:33:20 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x6, &(0x7f00000017c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x5e1502, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000001c0)='syz1\x00') ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x3, 0x2, &(0x7f0000000040)=[0xfd, 0xde0], &(0x7f0000000080)=[0x6, 0x9, 0x8, 0x0], &(0x7f00000000c0)=[0x101, 0x8, 0xf6f, 0x4a02, 0x20, 0xfff9, 0x101], &(0x7f0000000100)=[0x2, 0x20, 0x1, 0x7e, 0x7]}) 05:33:20 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x80086301, 0x0) 05:33:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0xff000000}}) 05:33:20 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x3, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:20 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x801c581f, 0x0) 05:33:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x240040c0) 05:33:20 executing program 5: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$video(&(0x7f0000000280), 0xcd, 0x6102) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000380)={0x2, "6c067713ead6e0d138e6bac08c6cf01af45e22b975cca6e7027df018f86b69b8", 0x3, 0x80000000, 0x5, 0x0, 0x40000, 0x8}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000140)}, 0x0, 0x0]) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0xfffffdfd}}) 05:33:20 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x3, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x0, 0x800) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x3, 0x0) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) 05:33:20 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc0045878, 0x0) 05:33:20 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x6, &(0x7f00000017c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x5e1502, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000001c0)='syz1\x00') ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x3, 0x2, &(0x7f0000000040)=[0xfd, 0xde0], &(0x7f0000000080)=[0x6, 0x9, 0x8, 0x0], &(0x7f00000000c0)=[0x101, 0x8, 0xf6f, 0x4a02, 0x20, 0xfff9, 0x101], &(0x7f0000000100)=[0x2, 0x20, 0x1, 0x7e, 0x7]}) io_setup(0x6, &(0x7f0000000480)) (async) io_setup(0x6, &(0x7f00000017c0)) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x5e1502, 0x0) (async) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000001c0)='syz1\x00') (async) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x3, 0x2, &(0x7f0000000040)=[0xfd, 0xde0], &(0x7f0000000080)=[0x6, 0x9, 0x8, 0x0], &(0x7f00000000c0)=[0x101, 0x8, 0xf6f, 0x4a02, 0x20, 0xfff9, 0x101], &(0x7f0000000100)=[0x2, 0x20, 0x1, 0x7e, 0x7]}) (async) 05:33:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x240040c0) 05:33:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0xffffffe7}}) 05:33:21 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc0045878, 0x0) 05:33:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0xffffffff}}) 05:33:21 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) r4 = eventfd(0xa86a) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000000c0)=r4, 0x1) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:21 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc0189436, 0x0) 05:33:21 executing program 0: io_setup(0x6, &(0x7f0000000480)) (async) io_setup(0x6, &(0x7f00000017c0)) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x5e1502, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000001c0)='syz1\x00') (async) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x3, 0x2, &(0x7f0000000040)=[0xfd, 0xde0], &(0x7f0000000080)=[0x6, 0x9, 0x8, 0x0], &(0x7f00000000c0)=[0x101, 0x8, 0xf6f, 0x4a02, 0x20, 0xfff9, 0x101], &(0x7f0000000100)=[0x2, 0x20, 0x1, 0x7e, 0x7]}) 05:33:21 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 05:33:21 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x2000, &(0x7f0000000000), 0x4, r1, 0xf}) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 05:33:21 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc020660b, 0x0) 05:33:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2}) 05:33:21 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) r4 = eventfd(0xa86a) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000000c0)=r4, 0x1) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) eventfd2(0x0, 0x800) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r3, 0x0, 0x0) (async) eventfd(0xa86a) (async) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000000c0)=r4, 0x1) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) 05:33:21 executing program 0: io_setup(0x103, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x80) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x0, 0x5}) io_setup(0x7, &(0x7f0000000100)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x802, 0x0) 05:33:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0x2}}) 05:33:21 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) 05:33:21 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) r4 = eventfd(0xa86a) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000000c0)=r4, 0x1) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:21 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x2000, &(0x7f0000000000), 0x4, r1, 0xf}) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x2000, &(0x7f0000000000), 0x4, r1, 0xf}) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) 05:33:21 executing program 5: io_setup(0x6, &(0x7f0000000480)) io_setup(0x2, &(0x7f00000017c0)) 05:33:21 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) 05:33:21 executing program 0: io_setup(0x103, &(0x7f0000000040)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x80) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x0, 0x5}) io_setup(0x7, &(0x7f0000000100)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x802, 0x0) 05:33:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0x3}}) 05:33:21 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x2000, &(0x7f0000000000), 0x4, r1, 0xf}) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 05:33:21 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) (async) 05:33:21 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x2, 0x0) 05:33:21 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x60, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x263}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000800}, 0x800) 05:33:21 executing program 0: io_setup(0x103, &(0x7f0000000040)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x80) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x0, 0x5}) (async, rerun: 64) io_setup(0x7, &(0x7f0000000100)) (rerun: 64) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x802, 0x0) 05:33:21 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = socket(0x26, 0x800, 0x101) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) io_submit(0x0, 0x2, &(0x7f0000000440)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xf0e9, r2, &(0x7f0000000280)="9d646a5c9efb0d84b00801605c90e65ff4a20677fb4566c5a73d5de8d27f16c1bfba96028e89f045dd6159972021ad8d3738900ea8841d37011079e7ed654d67a87cd4245d188c4139b2caca0cf2bf27663c6b15ddaeb7f55a781e43f9c894db4553", 0x62, 0xe5, 0x0, 0x3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x80, r3, &(0x7f0000000380)="14ed750d27cdba5425ebe58eabdbe752c9a654cfff6de037e86a74fe46255e7bc69478bf82068266ed8852c1bc57614d2625d0783515203888054b8b8c90d0edc5eb08116a49c8edaf01a67f765111fff458f0a068e9f9e88049fea76d6da411fab83452880dfde56f515caa15", 0x6d, 0x1, 0x0, 0x0, r1}]) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) read$fb(r1, &(0x7f0000000480)=""/248, 0xf8) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000000c0)=r0, 0x1) ioctl$BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) r5 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) ioctl$VFIO_SET_IOMMU(r5, 0x3b66, 0x2) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0x4}}) 05:33:21 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) 05:33:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x80000}) (fail_nth: 1) 05:33:21 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r2 = socket(0x26, 0x800, 0x101) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async, rerun: 64) io_submit(0x0, 0x2, &(0x7f0000000440)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xf0e9, r2, &(0x7f0000000280)="9d646a5c9efb0d84b00801605c90e65ff4a20677fb4566c5a73d5de8d27f16c1bfba96028e89f045dd6159972021ad8d3738900ea8841d37011079e7ed654d67a87cd4245d188c4139b2caca0cf2bf27663c6b15ddaeb7f55a781e43f9c894db4553", 0x62, 0xe5, 0x0, 0x3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x80, r3, &(0x7f0000000380)="14ed750d27cdba5425ebe58eabdbe752c9a654cfff6de037e86a74fe46255e7bc69478bf82068266ed8852c1bc57614d2625d0783515203888054b8b8c90d0edc5eb08116a49c8edaf01a67f765111fff458f0a068e9f9e88049fea76d6da411fab83452880dfde56f515caa15", 0x6d, 0x1, 0x0, 0x0, r1}]) (async, rerun: 64) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) read$fb(r1, &(0x7f0000000480)=""/248, 0xf8) (async, rerun: 32) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000000c0)=r0, 0x1) (async) ioctl$BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async, rerun: 64) r5 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) (rerun: 64) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) (async, rerun: 32) ioctl$VFIO_SET_IOMMU(r5, 0x3b66, 0x2) (async, rerun: 32) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0x5}}) 05:33:21 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x60, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x263}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000800}, 0x800) 05:33:21 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250200000008003c002100000005002d000100000008000300", @ANYRES32=r1, @ANYBLOB="0a000900aaaaaaaaaaaa000008003400ff7f000008000300", @ANYRES32=r2, @ANYBLOB="0c72ccd3ef5e915f3b0a0e31a800ca6df9e2c87bd67aa187fdc359b0ac244f3a6e1b322bffb1b71c544fb996035e71239c53aceacfbbeebbc800fd17b0e41a158c13fce8c728e2ec0a5789caa4f6834dc8466f644cb4960d72c4c0eb36c6e9983fe71038cb1065f59090c54f31b30b42e87aefb3c65400f09106009a55db41c959debe827ab4cb94ef521b68fbfe130b6cd66246b981bbd71433fb41073d127a8b7a83fb1b108226d50d7e6847ddcc400579c58c1717e6"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x82800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x894) 05:33:21 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x1ff800, &(0x7f00000017c0)) 05:33:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0x6}}) [ 3129.505192][T13003] ERROR: Out of memory at tomoyo_realpath_from_path. 05:33:21 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x60, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x263}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000800}, 0x800) 05:33:21 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250200000008003c002100000005002d000100000008000300", @ANYRES32=r1, @ANYBLOB="0a000900aaaaaaaaaaaa000008003400ff7f000008000300", @ANYRES32=r2, @ANYBLOB="0c72ccd3ef5e915f3b0a0e31a800ca6df9e2c87bd67aa187fdc359b0ac244f3a6e1b322bffb1b71c544fb996035e71239c53aceacfbbeebbc800fd17b0e41a158c13fce8c728e2ec0a5789caa4f6834dc8466f644cb4960d72c4c0eb36c6e9983fe71038cb1065f59090c54f31b30b42e87aefb3c65400f09106009a55db41c959debe827ab4cb94ef521b68fbfe130b6cd66246b981bbd71433fb41073d127a8b7a83fb1b108226d50d7e6847ddcc400579c58c1717e6"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x82800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x894) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250200000008003c002100000005002d000100000008000300", @ANYRES32=r1, @ANYBLOB="0a000900aaaaaaaaaaaa000008003400ff7f000008000300", @ANYRES32=r2, @ANYBLOB="0c72ccd3ef5e915f3b0a0e31a800ca6df9e2c87bd67aa187fdc359b0ac244f3a6e1b322bffb1b71c544fb996035e71239c53aceacfbbeebbc800fd17b0e41a158c13fce8c728e2ec0a5789caa4f6834dc8466f644cb4960d72c4c0eb36c6e9983fe71038cb1065f59090c54f31b30b42e87aefb3c65400f09106009a55db41c959debe827ab4cb94ef521b68fbfe130b6cd66246b981bbd71433fb41073d127a8b7a83fb1b108226d50d7e6847ddcc400579c58c1717e6"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x82800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, r4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x894) (async) 05:33:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0x7}}) 05:33:21 executing program 0: io_setup(0x6, &(0x7f0000000480)) (async) io_setup(0x1ff800, &(0x7f00000017c0)) 05:33:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x80000}) (fail_nth: 2) 05:33:21 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r2 = socket(0x26, 0x800, 0x101) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) io_submit(0x0, 0x2, &(0x7f0000000440)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xf0e9, r2, &(0x7f0000000280)="9d646a5c9efb0d84b00801605c90e65ff4a20677fb4566c5a73d5de8d27f16c1bfba96028e89f045dd6159972021ad8d3738900ea8841d37011079e7ed654d67a87cd4245d188c4139b2caca0cf2bf27663c6b15ddaeb7f55a781e43f9c894db4553", 0x62, 0xe5, 0x0, 0x3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x80, r3, &(0x7f0000000380)="14ed750d27cdba5425ebe58eabdbe752c9a654cfff6de037e86a74fe46255e7bc69478bf82068266ed8852c1bc57614d2625d0783515203888054b8b8c90d0edc5eb08116a49c8edaf01a67f765111fff458f0a068e9f9e88049fea76d6da411fab83452880dfde56f515caa15", 0x6d, 0x1, 0x0, 0x0, r1}]) (async, rerun: 32) write$vga_arbiter(r1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) read$fb(r1, &(0x7f0000000480)=""/248, 0xf8) (async, rerun: 32) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000000c0)=r0, 0x1) (async) ioctl$BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) r5 = openat$vfio(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x0, 0x7}) (async) ioctl$VFIO_SET_IOMMU(r5, 0x3b66, 0x2) (async, rerun: 32) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (rerun: 32) 05:33:21 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x1000, &(0x7f0000000040), 0xbb5f43cead6d8a29, r3, 0xb}) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000000)={0x662, {0x8, 0x1, 0x80000000, 0xfcc5, 0x8}}) 05:33:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0xe7}}) 05:33:21 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x3, r0}) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x1, 'veth0_to_batadv\x00', {}, 0x4}) 05:33:21 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250200000008003c002100000005002d000100000008000300", @ANYRES32=r1, @ANYBLOB="0a000900aaaaaaaaaaaa000008003400ff7f000008000300", @ANYRES32=r2, @ANYBLOB="0c72ccd3ef5e915f3b0a0e31a800ca6df9e2c87bd67aa187fdc359b0ac244f3a6e1b322bffb1b71c544fb996035e71239c53aceacfbbeebbc800fd17b0e41a158c13fce8c728e2ec0a5789caa4f6834dc8466f644cb4960d72c4c0eb36c6e9983fe71038cb1065f59090c54f31b30b42e87aefb3c65400f09106009a55db41c959debe827ab4cb94ef521b68fbfe130b6cd66246b981bbd71433fb41073d127a8b7a83fb1b108226d50d7e6847ddcc400579c58c1717e6"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x82800, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x0, 0x70bd2b}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x894) 05:33:22 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x1ff800, &(0x7f00000017c0)) io_setup(0x6, &(0x7f0000000480)) (async) io_setup(0x1ff800, &(0x7f00000017c0)) (async) 05:33:22 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x1000, &(0x7f0000000040), 0xbb5f43cead6d8a29, r3, 0xb}) (rerun: 32) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) (async) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000000)={0x662, {0x8, 0x1, 0x80000000, 0xfcc5, 0x8}}) [ 3129.742070][T13042] ERROR: Out of memory at tomoyo_realpath_from_path. 05:33:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0x300}}) 05:33:22 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x104, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000001) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) 05:33:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x80000}) (fail_nth: 3) 05:33:22 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x3, r0}) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x1, 'veth0_to_batadv\x00', {}, 0x4}) eventfd2(0x0, 0x800) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x3, r0}) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) write$vga_arbiter(r3, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x1, 'veth0_to_batadv\x00', {}, 0x4}) (async) 05:33:22 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async, rerun: 32) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 32) write$vga_arbiter(r3, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x1000, &(0x7f0000000040), 0xbb5f43cead6d8a29, r3, 0xb}) (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r4, 0x0, 0x0) (async) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000000)={0x662, {0x8, 0x1, 0x80000000, 0xfcc5, 0x8}}) 05:33:22 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x104, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000001) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) 05:33:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0x500}}) 05:33:22 executing program 0: ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000080)={0x20, 0x0, 0x4, 0x7fff, 0x6}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x181040, 0x0) r1 = eventfd(0x1ff) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000240)={0x4000, &(0x7f0000000200), 0x0, r1, 0x2}) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xd}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x0) io_setup(0x6, &(0x7f0000000480)) io_setup(0x1, &(0x7f0000000000)) 05:33:22 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x104, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000001) (async) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) 05:33:22 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x3, r0}) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r0}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r3, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x1, 'veth0_to_batadv\x00', {}, 0x4}) (rerun: 64) 05:33:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 05:33:22 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) 05:33:22 executing program 0: ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000080)={0x20, 0x0, 0x4, 0x7fff, 0x6}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x181040, 0x0) (async) r1 = eventfd(0x1ff) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000240)={0x4000, &(0x7f0000000200), 0x0, r1, 0x2}) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xd}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x0) io_setup(0x6, &(0x7f0000000480)) (async) io_setup(0x1, &(0x7f0000000000)) 05:33:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0x600}}) 05:33:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x80000}) 05:33:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) 05:33:22 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) (async) 05:33:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0x700}}) 05:33:22 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r4 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f00000002c0)={0x3, "e8e88a2e7ed48a79d401155bb3280cbed654565645511ad27507ecc9ac9d8ed5", 0x4, 0x10, 0x8001, 0x401, 0x4, 0x2, 0x9, 0x5}) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) (async) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 05:33:22 executing program 0: ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000080)={0x20, 0x0, 0x4, 0x7fff, 0x6}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x181040, 0x0) r1 = eventfd(0x1ff) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000240)={0x4000, &(0x7f0000000200), 0x0, r1, 0x2}) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xd}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async) io_setup(0x6, &(0x7f0000000480)) (async) io_setup(0x1, &(0x7f0000000000)) 05:33:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x2, 0x2202) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x584, 0x5, {0x0, 0xea60}, {r2, r3/1000+60000}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x1d, 0x0, 0x0, 0x0, "c512fb1e8a03588daa116b9f48f809f71e132dd129d75df2044c7d006b18b6cf6fcf8743e7137936b8ca62e97ab2b3d302dd731ad587c5e838d7746f3f6b063c"}}, 0x80}, 0x1, 0x0, 0x0, 0x4010}, 0x4000c081) 05:33:22 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) 05:33:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x2, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x80000}) 05:33:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0xe7ff}}) 05:33:22 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) write$vga_arbiter(r1, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) r4 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000680)) (async, rerun: 32) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) (async, rerun: 32) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f00000002c0)={0x3, "e8e88a2e7ed48a79d401155bb3280cbed654565645511ad27507ecc9ac9d8ed5", 0x4, 0x10, 0x8001, 0x401, 0x4, 0x2, 0x9, 0x5}) (async) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:22 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20044001) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffc0000}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) 05:33:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0xfdfd}}) 05:33:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async, rerun: 64) r1 = syz_open_dev$video(&(0x7f0000000040), 0x2, 0x2202) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x584, 0x5, {0x0, 0xea60}, {r2, r3/1000+60000}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x1d, 0x0, 0x0, 0x0, "c512fb1e8a03588daa116b9f48f809f71e132dd129d75df2044c7d006b18b6cf6fcf8743e7137936b8ca62e97ab2b3d302dd731ad587c5e838d7746f3f6b063c"}}, 0x80}, 0x1, 0x0, 0x0, 0x4010}, 0x4000c081) 05:33:22 executing program 2: r0 = eventfd2(0x0, 0x800) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) (async, rerun: 32) write$vga_arbiter(r1, 0x0, 0x0) (rerun: 32) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) (async) r4 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000680)) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000010c0)={0x6, 0x3f}) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f00000002c0)={0x3, "e8e88a2e7ed48a79d401155bb3280cbed654565645511ad27507ecc9ac9d8ed5", 0x4, 0x10, 0x8001, 0x401, 0x4, 0x2, 0x9, 0x5}) (async) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000140)={'custom0\x00'}) (async) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:22 executing program 0: io_setup(0x6, &(0x7f0000000480)) io_setup(0x8, &(0x7f00000017c0)) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x5}) 05:33:22 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20044001) (async) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffc0000}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) 05:33:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0xff00}}) 05:33:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x10, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x80000}) 05:33:22 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20044001) (async) ioctl$BINDER_CTL_ADD(r0, 0x10, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x20000081) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffc0000}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) 05:33:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000040), 0x2, 0x2202) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x584, 0x5, {0x0, 0xea60}, {r2, r3/1000+60000}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x1d, 0x0, 0x0, 0x0, "c512fb1e8a03588daa116b9f48f809f71e132dd129d75df2044c7d006b18b6cf6fcf8743e7137936b8ca62e97ab2b3d302dd731ad587c5e838d7746f3f6b063c"}}, 0x80}, 0x1, 0x0, 0x0, 0x4010}, 0x4000c081) 05:33:22 executing program 0: io_setup(0x6, &(0x7f0000000480)) (async) io_setup(0x8, &(0x7f00000017c0)) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x5}) 05:33:22 executing program 2: r0 = eventfd2(0x0, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x4000, &(0x7f0000000000), 0x2, r1}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x802, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000380)={'custom0\x00'}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffdef) 05:33:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000640), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)={0x2, {0x0, 0x0, 0x0, 0xffe7}}) 05:33:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x541b, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x80000}) 05:33:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="f474eaaac2c47c787b83577e5c7972dfb0a089fba0db79545f1d1d0bc6939aa1c3524aa3bc4294a161d6e4ee5c606054e11ba923611410f4b5523c44ba8045f027385732d81ba34d737b6f3402aee042fa9fccf7ca7d6af86afe243855cb9a0742e8e204ff6ea564ae3cb9d220b7bfb3f4e71377060cafa4cdb44c859d97b4e38c1012348794a7f21361be70124d187bc756e1dfa6695a83be96a3debcc8ca735d108f86bc121e40af6ca50