&(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000008c80)={&(0x7f0000008b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000008c40)={&(0x7f0000008c00)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7cc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000009500)='l2tp\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:19 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) 16:07:19 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) 16:07:20 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r6, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:20 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) 16:07:20 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) 16:07:20 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) 16:07:20 executing program 5: recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) 16:07:20 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:20 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) 16:07:20 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) 16:07:20 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 16:07:20 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000008c80)={&(0x7f0000008b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000008c40)={&(0x7f0000008c00)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7cc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:20 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) 16:07:20 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) 16:07:21 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 16:07:21 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r6, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:21 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:21 executing program 4: getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) 16:07:21 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) 16:07:21 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) 16:07:21 executing program 4: getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000380)) 16:07:21 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:21 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 16:07:21 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000008c80)={&(0x7f0000008b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000008c40)={&(0x7f0000008c00)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7cc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:21 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) 16:07:21 executing program 4: getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) 16:07:21 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r5, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:22 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r6, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:22 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) socket$nl_generic(0x10, 0x3, 0x10) 16:07:22 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:22 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) 16:07:22 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r6, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:22 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:22 executing program 3: write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) 16:07:22 executing program 3: write$smack_current(0xffffffffffffffff, 0x0, 0x0) 16:07:22 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000008c80)={&(0x7f0000008b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000008c40)={&(0x7f0000008c00)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7cc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:22 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:22 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:22 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r5, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:22 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:22 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:22 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r5, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:22 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:23 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) socket$nl_generic(0x10, 0x3, 0x10) 16:07:23 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) 16:07:23 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:23 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000008c80)={&(0x7f0000008b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000008c40)={&(0x7f0000008c00)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7cc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000009500)='l2tp\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:23 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000008c80)={&(0x7f0000008b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000008c40)={&(0x7f0000008c00)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7cc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:23 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000008c80)={&(0x7f0000008b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000008c40)={&(0x7f0000008c00)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7cc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000009500)='l2tp\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:23 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:23 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r5, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:23 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:23 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:23 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:23 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:23 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:23 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:24 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:24 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r5, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:24 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0)='batadv\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:24 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r5, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:24 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) 16:07:24 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r4, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:24 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000008c80)={&(0x7f0000008b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000008c40)={&(0x7f0000008c00)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7cc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x40000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:24 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:25 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) 16:07:25 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:25 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:25 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) 16:07:25 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r4, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:25 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r6, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000880), 0x4) connect$can_j1939(r4, &(0x7f00000008c0)={0x1d, r3, 0x0, {0x0, 0xff, 0x1}, 0x2}, 0x18) 16:07:25 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0)='batadv\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:25 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000440), 0x4) 16:07:25 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) 16:07:25 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) 16:07:25 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 16:07:25 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) 16:07:25 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) 16:07:26 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) 16:07:26 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r6, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000880), 0x4) connect$can_j1939(r4, &(0x7f00000008c0)={0x1d, r3, 0x0, {0x0, 0xff, 0x1}, 0x2}, 0x18) 16:07:26 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r4, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:26 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:26 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r6, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000880), 0x4) connect$can_j1939(r4, &(0x7f00000008c0)={0x1d, r3, 0x0, {0x0, 0xff, 0x1}, 0x2}, 0x18) 16:07:26 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) r1 = syz_io_uring_complete(0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000003b00)=0x1, 0x4) bind$can_raw(r0, &(0x7f0000003b40), 0x10) recvmsg$can_raw(r1, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) 16:07:26 executing program 4: openat$bsg(0xffffffffffffff9c, 0x0, 0x80002, 0x0) 16:07:26 executing program 4: openat$bsg(0xffffffffffffff9c, 0x0, 0x80002, 0x0) 16:07:26 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) 16:07:26 executing program 4: openat$bsg(0xffffffffffffff9c, 0x0, 0x80002, 0x0) 16:07:26 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000008c80)={&(0x7f0000008b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000008c40)={&(0x7f0000008c00)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7cc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000009500)='l2tp\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:26 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) 16:07:26 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) 16:07:27 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r6, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000880), 0x4) connect$can_j1939(r4, &(0x7f00000008c0)={0x1d, r3, 0x0, {0x0, 0xff, 0x1}, 0x2}, 0x18) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 16:07:27 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:27 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) 16:07:27 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) syz_io_uring_complete(0x0) 16:07:27 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r2, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:27 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) r1 = syz_io_uring_complete(0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000003b00)=0x1, 0x4) 16:07:27 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) syz_io_uring_complete(0x0) 16:07:27 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) 16:07:27 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) syz_io_uring_complete(0x0) 16:07:27 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) r1 = syz_io_uring_complete(0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000003b00)=0x1, 0x4) bind$can_raw(r0, &(0x7f0000003b40), 0x10) recvmsg$can_raw(r1, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000075c0)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007580)={&(0x7f0000007500)={0x44, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socket$l2tp(0x2, 0x2, 0x73) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007640)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x14, r3, 0x8, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0xc048004) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000007800)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000077c0)={&(0x7f0000007780)={0x38, 0x140a, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) 16:07:27 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) r1 = syz_io_uring_complete(0x0) recvmsg$can_raw(r1, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) 16:07:27 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) 16:07:28 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r6, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000880), 0x4) connect$can_j1939(r4, &(0x7f00000008c0)={0x1d, r3, 0x0, {0x0, 0xff, 0x1}, 0x2}, 0x18) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r2, 0x218, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x61}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x98a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4051) 16:07:28 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:28 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) r1 = syz_io_uring_complete(0x0) recvmsg$can_raw(r1, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) 16:07:28 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) r1 = syz_io_uring_complete(0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000003b00)=0x1, 0x4) bind$can_raw(r0, &(0x7f0000003b40), 0x10) recvmsg$can_raw(r1, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000075c0)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007580)={&(0x7f0000007500)={0x44, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socket$l2tp(0x2, 0x2, 0x73) 16:07:28 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r2, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:28 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) 16:07:28 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:28 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) 16:07:28 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) r1 = syz_io_uring_complete(0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000003b00)=0x1, 0x4) bind$can_raw(r0, &(0x7f0000003b40), 0x10) recvmsg$can_raw(r1, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) 16:07:28 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) 16:07:28 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) r1 = syz_io_uring_complete(0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000003b00)=0x1, 0x4) bind$can_raw(r0, &(0x7f0000003b40), 0x10) recvmsg$can_raw(r1, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000075c0)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007580)={&(0x7f0000007500)={0x44, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$batadv(&(0x7f0000007640)='batadv\x00') 16:07:28 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 16:07:29 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000380)=0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000440), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x66072a9ce06ceba5}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r6, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000880), 0x4) connect$can_j1939(r4, &(0x7f00000008c0)={0x1d, r3, 0x0, {0x0, 0xff, 0x1}, 0x2}, 0x18) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r2, 0x218, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x61}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x98a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4051) syz_genetlink_get_family_id$batadv(&(0x7f0000000b40)='batadv\x00') 16:07:29 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:29 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) 16:07:29 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) 16:07:29 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r2, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:29 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:29 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r2, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:29 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 16:07:29 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) 16:07:29 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) 16:07:29 executing program 3: openat$bsg(0xffffffffffffff9c, 0x0, 0x80002, 0x0) 16:07:29 executing program 3: openat$bsg(0xffffffffffffff9c, 0x0, 0x80002, 0x0) 16:07:29 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) 16:07:30 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:30 executing program 3: openat$bsg(0xffffffffffffff9c, 0x0, 0x80002, 0x0) 16:07:30 executing program 1: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000008a80)=[{}, {}, {}], &(0x7f0000008ac0)=0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000008b00), &(0x7f0000008b40)=0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000008c80)={&(0x7f0000008b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000008c40)={&(0x7f0000008c00)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7cc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000009500)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000009740)={&(0x7f0000009600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000009700)={&(0x7f0000009680)={0x6c, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48445}, 0x8010) 16:07:30 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:30 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:30 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) r1 = syz_io_uring_complete(0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000003b00)=0x1, 0x4) bind$can_raw(r0, &(0x7f0000003b40), 0x10) recvmsg$can_raw(r1, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000075c0)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007580)={&(0x7f0000007500)={0x44, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socket$l2tp(0x2, 0x2, 0x73) 16:07:30 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) 16:07:30 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80002, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffa37}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x40000) write$smack_current(0xffffffffffffffff, &(0x7f0000000300)={'\x83'}, 0x2) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=0x18) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) r1 = syz_io_uring_complete(0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000003b00)=0x1, 0x4) bind$can_raw(r0, &(0x7f0000003b40), 0x10) recvmsg$can_raw(r1, &(0x7f00000074c0)={&(0x7f0000004280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/117, 0x75}, {&(0x7f0000006400)=""/4096, 0x1000}], 0x5, &(0x7f0000007480)=""/24, 0x18}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000075c0)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007580)={&(0x7f0000007500)={0x44, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socket$l2tp(0x2, 0x2, 0x73) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007640)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x14, r3, 0x8, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0xc048004) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000007800)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000077c0)={&(0x7f0000007780)={0x38, 0x140a, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) r4 = syz_io_uring_complete(0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000007980)={0xffff7fff, 0x2, 0x4, 0x20, 0xfffffff7, {0x0, 0x2710}, {0x1, 0x0, 0xb4, 0x5, 0x40, 0x6, "d1dcd120"}, 0x3, 0x4, @fd, 0x3800000, 0x0, r0}) 16:07:30 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) 16:07:30 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:07:30 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) 16:07:30 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:30 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:30 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:31 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:31 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:31 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:31 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:31 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:31 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:31 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:31 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:31 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:31 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') 16:07:31 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:31 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:31 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') 16:07:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:32 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:32 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) 16:07:32 executing program 1: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:32 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) 16:07:32 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 16:07:32 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 16:07:32 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:32 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:32 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:32 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:32 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) 16:07:33 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:33 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:33 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:33 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:33 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:33 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:33 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:33 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:33 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) 16:07:33 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:33 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x102) 16:07:33 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) socket$inet_udplite(0x2, 0x2, 0x88) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:33 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x102) 16:07:33 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:33 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x102) 16:07:33 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:34 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) syz_io_uring_complete(r0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:34 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) syz_io_uring_complete(r0) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x102) 16:07:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x102) 16:07:34 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:34 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:34 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x102) 16:07:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:34 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:34 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:35 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:35 executing program 1: recvmsg(0xffffffffffffffff, 0x0, 0x102) 16:07:35 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:35 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:35 executing program 1: recvmsg(0xffffffffffffffff, 0x0, 0x102) 16:07:35 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:35 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:35 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:35 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:35 executing program 1: recvmsg(0xffffffffffffffff, 0x0, 0x102) 16:07:35 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:35 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x102) 16:07:36 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:36 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:36 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x102) 16:07:36 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:36 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x102) 16:07:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:36 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:36 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:36 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:36 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x0) 16:07:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:37 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:37 executing program 3: bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:37 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:37 executing program 3: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 16:07:37 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:37 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:37 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:37 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x102) 16:07:37 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:37 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:38 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) bind$can_raw(0xffffffffffffffff, &(0x7f0000000500), 0x10) 16:07:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:38 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:38 executing program 4: socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:38 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x0) 16:07:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:38 executing program 4: socketpair(0x0, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:38 executing program 1: socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:38 executing program 4: socketpair(0x0, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) 16:07:39 executing program 4: socketpair(0x0, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) 16:07:39 executing program 1: socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:39 executing program 4: socketpair(0x23, 0x0, 0x2, &(0x7f0000004fc0)) 16:07:39 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x0) 16:07:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) 16:07:39 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:39 executing program 1: socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x0) 16:07:39 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:39 executing program 1: socketpair(0x0, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:40 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:40 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:40 executing program 1: socketpair(0x0, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x0) 16:07:40 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:40 executing program 4: socketpair(0x23, 0x0, 0x2, 0x0) 16:07:40 executing program 1: socketpair(0x0, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:40 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x0) 16:07:40 executing program 4: socketpair(0x23, 0x0, 0x2, 0x0) 16:07:40 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:41 executing program 1: socketpair(0x23, 0x0, 0x2, &(0x7f0000004fc0)) 16:07:41 executing program 4: socketpair(0x23, 0x0, 0x2, 0x0) 16:07:41 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:41 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:41 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:41 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:41 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:41 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:41 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x0) 16:07:41 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/70, 0x46}], 0x4}, 0x102) 16:07:41 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:41 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:41 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:41 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:41 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:41 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:41 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:41 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x102) 16:07:42 executing program 1: socketpair(0x23, 0x0, 0x2, 0x0) 16:07:42 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x0) 16:07:42 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:42 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:42 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x102) 16:07:42 executing program 1: socketpair(0x23, 0x0, 0x2, 0x0) 16:07:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x102) 16:07:42 executing program 1: socketpair(0x23, 0x0, 0x2, 0x0) 16:07:42 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:42 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:42 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x0) 16:07:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x102) 16:07:43 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:43 executing program 4: socketpair(0x23, 0x0, 0x0, 0x0) 16:07:43 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:43 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:43 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x0) 16:07:43 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:43 executing program 2: socketpair(0x23, 0x0, 0x0, 0x0) 16:07:43 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x0) 16:07:43 executing program 4: socketpair(0x23, 0x0, 0x0, 0x0) 16:07:43 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:43 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x0) 16:07:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:43 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:43 executing program 2: socketpair(0x23, 0x0, 0x0, 0x0) 16:07:43 executing program 4: socketpair(0x23, 0x0, 0x0, 0x0) 16:07:43 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:43 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)=@xdp, 0x80, 0x0}, 0x0) 16:07:44 executing program 2: socketpair(0x23, 0x0, 0x0, 0x0) 16:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x0) 16:07:44 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x0) 16:07:44 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000004fc0)) 16:07:44 executing program 1: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x0) 16:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) 16:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:45 executing program 2: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000095c0)={&(0x7f00000094c0), 0xc, &(0x7f0000009580)={&(0x7f0000009540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:45 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 16:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:45 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 16:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:46 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') 16:07:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:46 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') 16:07:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:46 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:46 executing program 1: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:46 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:46 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) 16:07:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:47 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) 16:07:47 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) 16:07:47 executing program 1: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}], 0x6}, 0x40000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000005c0)=@nl, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/165, 0xa5}], 0x6}, 0x100) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000007e80)=[{{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/4, 0x4}], 0x4}, 0x81}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/146, 0x92}], 0x3, &(0x7f0000002680)=""/166, 0xa6}, 0x4d9}, {{&(0x7f0000002740)=@ax25={{0x3, @default}, [@remote, @default, @default, @null, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/182, 0xb6}, {&(0x7f0000002880)=""/56, 0x38}], 0x2}, 0x7f}, {{&(0x7f0000002900)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/245, 0xf5}], 0x3, &(0x7f0000003bc0)=""/96, 0x60}, 0x3ff}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=""/115, 0x73}, 0x80}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/94, 0x5e}, {&(0x7f0000004f00)=""/233, 0xe9}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/208, 0xd0}, {&(0x7f0000005200)=""/233, 0xe9}, {&(0x7f0000005300)=""/117, 0x75}, {&(0x7f0000005380)=""/18, 0x12}], 0x9, &(0x7f0000005480)=""/208, 0xd0}, 0x2}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/95, 0x5f}, {&(0x7f0000006680)=""/87, 0x57}, {&(0x7f0000006700)}], 0x4, &(0x7f0000006780)=""/4096, 0x1000}, 0x711}, {{&(0x7f0000007780)=@hci, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007800)=""/160, 0xa0}, {&(0x7f00000078c0)=""/114, 0x72}, {&(0x7f0000007940)=""/86, 0x56}, {&(0x7f00000079c0)=""/115, 0x73}], 0x4}, 0xad6}, {{&(0x7f0000007a80)=@xdp, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/198, 0xc6}, {&(0x7f0000007c00)=""/81, 0x51}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x4, &(0x7f0000007dc0)=""/150, 0x96}, 0x8001}], 0x9, 0x0, &(0x7f00000080c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000008100)=@ethernet={0x6, @dev={[], 0x36}}, 0x0, 0x0, 0x1}, 0x1f) syz_io_uring_setup(0x13d6, &(0x7f00000081c0)={0x0, 0x9815, 0x20, 0x2, 0x1ae}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000008240), &(0x7f0000008280)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000008a40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000008a00)={&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000008880)=[{&(0x7f0000008340)=""/168, 0xa8}, {&(0x7f0000008400)=""/251, 0xfb}, {&(0x7f0000008500)=""/164, 0xa4}, {&(0x7f00000085c0)=""/45, 0x2d}, {&(0x7f0000008600)=""/60, 0x3c}, {&(0x7f0000008640)=""/227, 0xe3}, {&(0x7f0000008740)=""/184, 0xb8}, {&(0x7f0000008800)=""/87, 0x57}], 0x8, &(0x7f0000008900)=""/240, 0xf0}, 0x0, 0x80010122, 0x0, {0x2}}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:47 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000095c0)={0x0, 0x0, &(0x7f0000009580)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000009640)='devlink\x00') 16:07:47 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') 16:07:47 executing program 5: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:47 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) 16:07:47 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') 16:07:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:48 executing program 0: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') 16:07:48 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 16:07:48 executing program 5: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) 16:07:48 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) 16:07:48 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 16:07:48 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:48 executing program 5: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 16:07:48 executing program 0: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') 16:07:48 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 16:07:48 executing program 5: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') 16:07:48 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:49 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:49 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) 16:07:49 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:49 executing program 0: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:49 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) 16:07:49 executing program 5: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r5, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)) 16:07:49 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)) 16:07:49 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:49 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, &(0x7f0000000500), 0x10) socketpair(0x23, 0x6, 0x2, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000005140)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x1c, r8, 0x611, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x40001) 16:07:49 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) socketpair(0x2, 0x6, 0x7, &(0x7f00000004c0)) 16:07:49 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:07:49 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:07:49 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:07:49 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:49 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:07:49 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) 16:07:49 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:49 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) 16:07:49 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)={0x6, 0xc, 0x4, 0x4000, 0x3ff, {r12, r13/1000+10000}, {0x2, 0x1, 0x9, 0xff, 0x9, 0x8b, "73e05b51"}, 0x4320988e, 0x3, @userptr=0x200, 0x8e7}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000600)={0x2, 0x1, 0x4, 0x40, 0x2, {0x77359400}, {0x4, 0x2, 0xc6, 0x2b, 0x7, 0x1, "44c887b0"}, 0x0, 0x1, @fd=r2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000700)={0xfffffffe, 0x3, 0x4, 0x8, 0x4, {}, {0x0, 0x2, 0x1, 0x9, 0xdb, 0xe0, "fde0fd31"}, 0x5, 0xa3d9dbae31b849c, @fd=r14, 0x1e1}) 16:07:49 executing program 1: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)={0x6, 0xc, 0x4, 0x4000, 0x3ff, {r12, r13/1000+10000}, {0x2, 0x1, 0x9, 0xff, 0x9, 0x8b, "73e05b51"}, 0x4320988e, 0x3, @userptr=0x200, 0x8e7}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000600)={0x2, 0x1, 0x4, 0x40, 0x2, {0x77359400}, {0x4, 0x2, 0xc6, 0x2b, 0x7, 0x1, "44c887b0"}, 0x0, 0x1, @fd=r2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000700)={0xfffffffe, 0x3, 0x4, 0x8, 0x4, {}, {0x0, 0x2, 0x1, 0x9, 0xdb, 0xe0, "fde0fd31"}, 0x5, 0xa3d9dbae31b849c, @fd=r14, 0x1e1}) 16:07:49 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) socket$inet_udplite(0x2, 0x2, 0x88) 16:07:49 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:07:49 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:50 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) socket$inet_udplite(0x2, 0x2, 0x88) 16:07:50 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) 16:07:50 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)={0x6, 0xc, 0x4, 0x4000, 0x3ff, {r12, r13/1000+10000}, {0x2, 0x1, 0x9, 0xff, 0x9, 0x8b, "73e05b51"}, 0x4320988e, 0x3, @userptr=0x200, 0x8e7}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000600)={0x2, 0x1, 0x4, 0x40, 0x2, {0x77359400}, {0x4, 0x2, 0xc6, 0x2b, 0x7, 0x1, "44c887b0"}, 0x0, 0x1, @fd=r2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000700)={0xfffffffe, 0x3, 0x4, 0x8, 0x4, {}, {0x0, 0x2, 0x1, 0x9, 0xdb, 0xe0, "fde0fd31"}, 0x5, 0xa3d9dbae31b849c, @fd=r14, 0x1e1}) 16:07:50 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) 16:07:50 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 16:07:50 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:50 executing program 1: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) 16:07:50 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)={0x6, 0xc, 0x4, 0x4000, 0x3ff, {r12, r13/1000+10000}, {0x2, 0x1, 0x9, 0xff, 0x9, 0x8b, "73e05b51"}, 0x4320988e, 0x3, @userptr=0x200, 0x8e7}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000600)={0x2, 0x1, 0x4, 0x40, 0x2, {0x77359400}, {0x4, 0x2, 0xc6, 0x2b, 0x7, 0x1, "44c887b0"}, 0x0, 0x1, @fd=r2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000700)={0xfffffffe, 0x3, 0x4, 0x8, 0x4, {}, {0x0, 0x2, 0x1, 0x9, 0xdb, 0xe0, "fde0fd31"}, 0x5, 0xa3d9dbae31b849c, @fd=r14, 0x1e1}) 16:07:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x0) 16:07:50 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) r3 = syz_io_uring_complete(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) 16:07:50 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) syz_io_uring_complete(r0) 16:07:50 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:50 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x0) 16:07:50 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)={0x6, 0xc, 0x4, 0x4000, 0x3ff, {r12, r13/1000+10000}, {0x2, 0x1, 0x9, 0xff, 0x9, 0x8b, "73e05b51"}, 0x4320988e, 0x3, @userptr=0x200, 0x8e7}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000600)={0x2, 0x1, 0x4, 0x40, 0x2, {0x77359400}, {0x4, 0x2, 0xc6, 0x2b, 0x7, 0x1, "44c887b0"}, 0x0, 0x1, @fd=r2, 0x1}) 16:07:50 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r2, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r1, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) syz_io_uring_complete(r0) 16:07:50 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) 16:07:50 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:50 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x0) 16:07:50 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)={0x6, 0xc, 0x4, 0x4000, 0x3ff, {r12, r13/1000+10000}, {0x2, 0x1, 0x9, 0xff, 0x9, 0x8b, "73e05b51"}, 0x4320988e, 0x3, @userptr=0x200, 0x8e7}) 16:07:50 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:50 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0xffffffff, 0x0, @local, @empty, 0x1, 0x7, 0x9, 0x800}}) 16:07:50 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) 16:07:50 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)) 16:07:50 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)={0x6, 0xc, 0x4, 0x4000, 0x3ff, {r12, r13/1000+10000}, {0x2, 0x1, 0x9, 0xff, 0x9, 0x8b, "73e05b51"}, 0x4320988e, 0x3, @userptr=0x200, 0x8e7}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000600)={0x2, 0x1, 0x4, 0x40, 0x2, {0x77359400}, {0x4, 0x2, 0xc6, 0x2b, 0x7, 0x1, "44c887b0"}, 0x0, 0x1, @fd=r2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000700)={0xfffffffe, 0x3, 0x4, 0x8, 0x4, {}, {0x0, 0x2, 0x1, 0x9, 0xdb, 0xe0, "fde0fd31"}, 0x5, 0xa3d9dbae31b849c, @fd=r14, 0x1e1}) 16:07:50 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:51 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) 16:07:51 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) 16:07:51 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:51 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000804) 16:07:51 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:51 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)={0x6, 0xc, 0x4, 0x4000, 0x3ff, {r12, r13/1000+10000}, {0x2, 0x1, 0x9, 0xff, 0x9, 0x8b, "73e05b51"}, 0x4320988e, 0x3, @userptr=0x200, 0x8e7}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000600)={0x2, 0x1, 0x4, 0x40, 0x2, {0x77359400}, {0x4, 0x2, 0xc6, 0x2b, 0x7, 0x1, "44c887b0"}, 0x0, 0x1, @fd=r2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000700)={0xfffffffe, 0x3, 0x4, 0x8, 0x4, {}, {0x0, 0x2, 0x1, 0x9, 0xdb, 0xe0, "fde0fd31"}, 0x5, 0xa3d9dbae31b849c, @fd=r14, 0x1e1}) 16:07:51 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)) 16:07:51 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) 16:07:51 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:51 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) ioctl$FBIOBLANK(r0, 0x4611, 0x1) 16:07:51 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:51 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)={0x6, 0xc, 0x4, 0x4000, 0x3ff, {r12, r13/1000+10000}, {0x2, 0x1, 0x9, 0xff, 0x9, 0x8b, "73e05b51"}, 0x4320988e, 0x3, @userptr=0x200, 0x8e7}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000600)={0x2, 0x1, 0x4, 0x40, 0x2, {0x77359400}, {0x4, 0x2, 0xc6, 0x2b, 0x7, 0x1, "44c887b0"}, 0x0, 0x1, @fd=r2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000700)={0xfffffffe, 0x3, 0x4, 0x8, 0x4, {}, {0x0, 0x2, 0x1, 0x9, 0xdb, 0xe0, "fde0fd31"}, 0x5, 0xa3d9dbae31b849c, @fd=r14, 0x1e1}) 16:07:51 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) 16:07:51 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:51 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) 16:07:51 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) 16:07:51 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:51 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)={0x6, 0xc, 0x4, 0x4000, 0x3ff, {r12, r13/1000+10000}, {0x2, 0x1, 0x9, 0xff, 0x9, 0x8b, "73e05b51"}, 0x4320988e, 0x3, @userptr=0x200, 0x8e7}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000600)={0x2, 0x1, 0x4, 0x40, 0x2, {0x77359400}, {0x4, 0x2, 0xc6, 0x2b, 0x7, 0x1, "44c887b0"}, 0x0, 0x1, @fd=r2, 0x1}) 16:07:51 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) 16:07:51 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) syz_io_uring_complete(r7) 16:07:51 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:51 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)={0x6, 0xc, 0x4, 0x4000, 0x3ff, {r12, r13/1000+10000}, {0x2, 0x1, 0x9, 0xff, 0x9, 0x8b, "73e05b51"}, 0x4320988e, 0x3, @userptr=0x200, 0x8e7}) 16:07:51 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:51 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) 16:07:51 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) 16:07:51 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:51 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r7}) 16:07:51 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:52 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)) 16:07:52 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) fcntl$getown(0xffffffffffffffff, 0x9) 16:07:52 executing program 4: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) 16:07:52 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) 16:07:52 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:52 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:52 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 16:07:52 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) 16:07:52 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r3, r4/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r1, 0x9, 0x0, r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r1, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) 16:07:52 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:52 executing program 4: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}], 0x48) 16:07:52 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r3, r4/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r1, 0x9, 0x0, r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r1, 0x0) 16:07:52 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fcntl$getown(0xffffffffffffffff, 0x9) 16:07:52 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:52 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)) 16:07:52 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:52 executing program 4: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) 16:07:52 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) 16:07:52 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:52 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r1, 0x0) 16:07:52 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:52 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) 16:07:52 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:52 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fcntl$getown(0xffffffffffffffff, 0x9) 16:07:52 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:52 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r1, 0x0) 16:07:52 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) syz_io_uring_complete(r7) 16:07:53 executing program 3: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r3, r4/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r1, 0x9, 0x0, r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r1, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) 16:07:53 executing program 4: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)) 16:07:53 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r1, 0x0) 16:07:53 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 3: syz_io_uring_setup(0x5084, &(0x7f0000000000)={0x0, 0x916f, 0x0, 0x3, 0x17f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x3c000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getown(r1, 0x9) 16:07:53 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r7}) 16:07:53 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r1, 0x0) 16:07:53 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) 16:07:53 executing program 3: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r7}) 16:07:53 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, 0xffffffffffffffff, 0x0) 16:07:53 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 0: syz_io_uring_complete(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r3, r4/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r1, 0x9, 0x0, r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r1, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) 16:07:53 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, 0xffffffffffffffff, 0x0) 16:07:53 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, 0xffffffffffffffff, 0x0) 16:07:53 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:53 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r3, r4/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r1, 0x9, 0x0, r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r1, 0x0) 16:07:53 executing program 0: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) syz_io_uring_complete(0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r0, 0x0) 16:07:54 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 1: syz_io_uring_complete(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r3, r4/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r1, 0x9, 0x0, r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r1, 0x0) 16:07:54 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r0, 0x0) 16:07:54 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 0: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 1: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r3, r4/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r1, 0x9, 0x0, r5}) 16:07:54 executing program 0: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r0, 0x0) 16:07:54 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)) 16:07:54 executing program 1: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r0, 0x0) 16:07:54 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 1: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)) 16:07:54 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r0, 0x0) 16:07:54 executing program 0: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 3: syz_io_uring_complete(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 0: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:54 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r0, 0x0) 16:07:55 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000180)) 16:07:55 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 3: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 0: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r0, 0x0) 16:07:55 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) clock_gettime(0x0, &(0x7f0000000180)) 16:07:55 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 3: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x0) 16:07:55 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) syz_io_uring_complete(0x0) clock_gettime(0x0, &(0x7f0000000180)) 16:07:55 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 16:07:55 executing program 3: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) clock_gettime(0x0, &(0x7f0000000180)) 16:07:55 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 16:07:55 executing program 2: clock_gettime(0x0, &(0x7f0000000180)) 16:07:55 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:55 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 16:07:55 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 2: clock_gettime(0x0, &(0x7f0000000180)) 16:07:56 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) 16:07:56 executing program 2: clock_gettime(0x0, &(0x7f0000000180)) 16:07:56 executing program 4: syz_io_uring_complete(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) 16:07:56 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) clock_gettime(0x0, &(0x7f0000000180)) 16:07:56 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 4: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) 16:07:56 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) clock_gettime(0x0, &(0x7f0000000180)) 16:07:56 executing program 4: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 5: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) clock_gettime(0x0, &(0x7f0000000180)) 16:07:56 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 4: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:56 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:57 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) clock_gettime(0x0, &(0x7f0000000180)) 16:07:57 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) clock_gettime(0x0, &(0x7f0000000180)) 16:07:57 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:57 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:57 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x2, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f0000000180)) 16:07:57 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:57 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:57 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 5: syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x1, [0x0]}) clock_gettime(0x0, &(0x7f0000000180)) 16:07:57 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:07:57 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:57 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 5: syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000180)) 16:07:57 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:57 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:07:57 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:07:57 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:58 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:58 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:58 executing program 5: syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:58 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)) clock_gettime(0x0, 0x0) 16:07:58 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:07:58 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:07:58 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:58 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:58 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:58 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)) clock_gettime(0x0, 0x0) 16:07:58 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:07:58 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:07:58 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)) clock_gettime(0x0, 0x0) 16:07:58 executing program 0: syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:58 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:58 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:58 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:58 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:07:58 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:58 executing program 2: syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:58 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:58 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:07:58 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:58 executing program 1: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) clock_gettime(0x0, &(0x7f0000000180)) 16:07:58 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:58 executing program 2: clock_gettime(0x0, &(0x7f0000000180)) 16:07:58 executing program 0: clock_gettime(0x0, &(0x7f0000000180)) 16:07:59 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:07:59 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:59 executing program 1: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) clock_gettime(0x0, &(0x7f0000000180)) 16:07:59 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:59 executing program 0: clock_gettime(0x0, &(0x7f0000000180)) 16:07:59 executing program 2: clock_gettime(0x0, &(0x7f0000000180)) 16:07:59 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:07:59 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:59 executing program 1: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) clock_gettime(0x0, &(0x7f0000000180)) 16:07:59 executing program 2: clock_gettime(0x0, &(0x7f0000000180)) 16:07:59 executing program 0: clock_gettime(0x0, &(0x7f0000000180)) 16:07:59 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:59 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:59 executing program 1: clock_gettime(0x0, &(0x7f0000000180)) 16:07:59 executing program 3: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:07:59 executing program 2: clock_gettime(0x0, 0x0) 16:07:59 executing program 0: clock_gettime(0x0, 0x0) 16:07:59 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:59 executing program 2: clock_gettime(0x0, 0x0) 16:07:59 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:59 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:59 executing program 1: clock_gettime(0x0, 0x0) 16:07:59 executing program 0: clock_gettime(0x0, 0x0) 16:07:59 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:59 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:07:59 executing program 2: clock_gettime(0x0, 0x0) 16:07:59 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:07:59 executing program 1: clock_gettime(0x0, 0x0) 16:07:59 executing program 0: clock_gettime(0x0, 0x0) 16:07:59 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:08:00 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 1: clock_gettime(0x0, 0x0) 16:08:00 executing program 0: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 3: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) clock_gettime(0x0, &(0x7f0000000180)) 16:08:00 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:08:00 executing program 2: syz_io_uring_complete(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 1: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)) 16:08:00 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:08:00 executing program 4: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:08:00 executing program 3: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 2: syz_io_uring_complete(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 0: syz_io_uring_complete(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 1: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r3, r4/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r1, 0x9, 0x0, r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r1, 0x0) 16:08:00 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:08:00 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 2: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:00 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000b80)) 16:08:00 executing program 4: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x0, 0x8, {}, {0x1, 0xc, 0x6, 0xe0, 0x3f, 0x7, "581bac32"}, 0x4, 0x2, @offset=0xfff, 0x8, 0x0, r0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x100, 0x81, {0x77359400}, {0x5, 0x2, 0x7f, 0x7, 0x81, 0x0, "61f1092f"}, 0x101, 0x2, @offset=0x4872, 0x9, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x2, 0x4, 0x20, 0x7, {r4, r5/1000+10000}, {0x1, 0xc, 0x3, 0x8, 0x7, 0x7f, "6f2938c0"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x40010, r2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x4, 0x1, 0x4, 0x3e41d24c6690eafc, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x2, 0xff, 0x40, "7dfcab4a"}, 0x0, 0x1, @userptr=0x6, 0xffffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x100, 0x8, 0x4, 0x8, 0x7ff, {}, {0x3, 0xc, 0x5, 0x40, 0x5, 0x0, "203377a7"}, 0x531f, 0x2, @offset=0x400, 0x3, 0x0, r8}) r9 = syz_io_uring_complete(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x97e77c844766a954}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0x8f3, 0x2, 0x4, 0x8, 0xfffffff7, {r10, r11/1000+60000}, {0x4, 0x0, 0x5, 0x5, 0x80, 0x0, "22cbc75e"}, 0x8, 0x3, @userptr=0xfffffffffffffffc, 0xfffffffb}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)={0x6, 0xc, 0x4, 0x4000, 0x3ff, {r12, r13/1000+10000}, {0x2, 0x1, 0x9, 0xff, 0x9, 0x8b, "73e05b51"}, 0x4320988e, 0x3, @userptr=0x200, 0x8e7}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000600)={0x2, 0x1, 0x4, 0x40, 0x2, {0x77359400}, {0x4, 0x2, 0xc6, 0x2b, 0x7, 0x1, "44c887b0"}, 0x0, 0x1, @fd=r2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000700)={0xfffffffe, 0x3, 0x4, 0x8, 0x4, {}, {0x0, 0x2, 0x1, 0x9, 0xdb, 0xe0, "fde0fd31"}, 0x5, 0xa3d9dbae31b849c, @fd=r14, 0x1e1}) 16:08:00 executing program 2: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:08:00 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:08:00 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:08:00 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:08:00 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:08:00 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:08:01 executing program 2: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:08:01 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:08:01 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:08:01 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:08:01 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:08:01 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:08:01 executing program 2 (fault-call:1 fault-nth:0): syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:01 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) [ 345.728211][ T1123] FAULT_INJECTION: forcing a failure. [ 345.728211][ T1123] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 345.762089][ T1123] CPU: 1 PID: 1123 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 16:08:01 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) [ 345.770814][ T1123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.780889][ T1123] Call Trace: [ 345.784183][ T1123] dump_stack+0x183/0x22e [ 345.788700][ T1123] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 345.794519][ T1123] ? show_regs_print_info+0x12/0x12 [ 345.799737][ T1123] ? __lock_acquire+0x5e40/0x5e40 [ 345.804788][ T1123] ? rcu_read_lock_sched_held+0x87/0x110 [ 345.810498][ T1123] should_fail+0x384/0x4b0 [ 345.814937][ T1123] _copy_from_user+0x2d/0x170 [ 345.819737][ T1123] __se_sys_io_uring_setup+0xb4/0x37b0 16:08:01 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) [ 345.825280][ T1123] ? ksys_write+0x219/0x2a0 [ 345.829888][ T1123] ? __lock_acquire+0x5e40/0x5e40 [ 345.834942][ T1123] ? file_end_write+0x220/0x220 [ 345.839825][ T1123] ? __x64_sys_io_uring_setup+0x60/0x60 [ 345.845393][ T1123] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 345.851396][ T1123] ? print_irqtrace_events+0x220/0x220 [ 345.856879][ T1123] ? print_irqtrace_events+0x220/0x220 [ 345.862366][ T1123] ? syscall_enter_from_user_mode+0x24/0x190 [ 345.868458][ T1123] ? syscall_enter_from_user_mode+0x24/0x190 [ 345.874466][ T1123] do_syscall_64+0x2d/0x70 [ 345.879066][ T1123] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 345.885056][ T1123] RIP: 0033:0x45e219 [ 345.888966][ T1123] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.908592][ T1123] RSP: 002b:00007f8f4e73dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 345.917032][ T1123] RAX: ffffffffffffffda RBX: 0000000020000ac0 RCX: 000000000045e219 16:08:01 executing program 5: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:08:01 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) [ 345.925022][ T1123] RDX: 0000000020ffd000 RSI: 0000000020000ac0 RDI: 0000000000006a65 [ 345.933012][ T1123] RBP: 00007f8f4e73dca0 R08: 0000000020000b80 R09: 0000000020000b80 [ 345.941003][ T1123] R10: 0000000020000b40 R11: 0000000000000206 R12: 0000000020ffd000 [ 345.949077][ T1123] R13: 0000000020ffd000 R14: 0000000020000b80 R15: 0000000020000b40 16:08:01 executing program 0: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), 0x0) 16:08:01 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:01 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0xd011, r4, 0x0) 16:08:01 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) 16:08:01 executing program 5 (fault-call:1 fault-nth:0): syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:01 executing program 2 (fault-call:1 fault-nth:1): syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:01 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) [ 346.289466][ T1175] FAULT_INJECTION: forcing a failure. [ 346.289466][ T1175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.326173][ T1177] FAULT_INJECTION: forcing a failure. [ 346.326173][ T1177] name failslab, interval 1, probability 0, space 0, times 1 [ 346.339394][ T1175] CPU: 1 PID: 1175 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 346.348191][ T1175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.358262][ T1175] Call Trace: [ 346.361556][ T1175] dump_stack+0x183/0x22e [ 346.365914][ T1175] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 346.371663][ T1175] ? show_regs_print_info+0x12/0x12 [ 346.376884][ T1175] ? __lock_acquire+0x5e40/0x5e40 [ 346.381921][ T1175] ? rcu_read_lock_sched_held+0x87/0x110 [ 346.387575][ T1175] should_fail+0x384/0x4b0 [ 346.392009][ T1175] _copy_from_user+0x2d/0x170 [ 346.396704][ T1175] __se_sys_io_uring_setup+0xb4/0x37b0 [ 346.402191][ T1175] ? ksys_write+0x219/0x2a0 [ 346.406709][ T1175] ? __lock_acquire+0x5e40/0x5e40 [ 346.411759][ T1175] ? file_end_write+0x220/0x220 [ 346.416644][ T1175] ? __x64_sys_io_uring_setup+0x60/0x60 [ 346.422212][ T1175] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 346.428252][ T1175] ? print_irqtrace_events+0x220/0x220 [ 346.433738][ T1175] ? print_irqtrace_events+0x220/0x220 [ 346.439215][ T1175] ? syscall_enter_from_user_mode+0x24/0x190 [ 346.445215][ T1175] ? syscall_enter_from_user_mode+0x24/0x190 [ 346.451304][ T1175] do_syscall_64+0x2d/0x70 [ 346.455742][ T1175] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 346.461650][ T1175] RIP: 0033:0x45e219 [ 346.465559][ T1175] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:08:02 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) [ 346.485290][ T1175] RSP: 002b:00007fb783996be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 346.493730][ T1175] RAX: ffffffffffffffda RBX: 0000000020000ac0 RCX: 000000000045e219 [ 346.501749][ T1175] RDX: 0000000020ffd000 RSI: 0000000020000ac0 RDI: 0000000000006a65 [ 346.509738][ T1175] RBP: 00007fb783996ca0 R08: 0000000020000b80 R09: 0000000020000b80 [ 346.517731][ T1175] R10: 0000000020000b40 R11: 0000000000000206 R12: 0000000020ffd000 [ 346.525723][ T1175] R13: 0000000020ffd000 R14: 0000000020000b80 R15: 0000000020000b40 [ 346.568417][ T1177] CPU: 1 PID: 1177 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 346.577145][ T1177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.587216][ T1177] Call Trace: [ 346.590513][ T1177] dump_stack+0x183/0x22e [ 346.594862][ T1177] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 346.600601][ T1177] ? show_regs_print_info+0x12/0x12 [ 346.605812][ T1177] ? __lock_acquire+0x5e40/0x5e40 [ 346.610858][ T1177] should_fail+0x384/0x4b0 [ 346.615294][ T1177] ? __se_sys_io_uring_setup+0x608/0x37b0 [ 346.621037][ T1177] should_failslab+0x5/0x20 [ 346.625679][ T1177] kmem_cache_alloc_trace+0x65/0x300 [ 346.631074][ T1177] ? security_capable+0xb1/0xd0 [ 346.636075][ T1177] __se_sys_io_uring_setup+0x608/0x37b0 [ 346.641847][ T1177] ? __lock_acquire+0x5e40/0x5e40 [ 346.646896][ T1177] ? file_end_write+0x220/0x220 [ 346.651774][ T1177] ? __x64_sys_io_uring_setup+0x60/0x60 [ 346.657337][ T1177] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 346.663343][ T1177] ? syscall_enter_from_user_mode+0x24/0x190 [ 346.669340][ T1177] ? syscall_enter_from_user_mode+0x24/0x190 [ 346.675340][ T1177] do_syscall_64+0x2d/0x70 [ 346.679770][ T1177] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 346.685676][ T1177] RIP: 0033:0x45e219 [ 346.689578][ T1177] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.709243][ T1177] RSP: 002b:00007f8f4e73dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 16:08:02 executing program 5 (fault-call:1 fault-nth:1): syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:02 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) [ 346.717685][ T1177] RAX: ffffffffffffffda RBX: 0000000020000ac0 RCX: 000000000045e219 [ 346.725678][ T1177] RDX: 0000000020ffd000 RSI: 0000000020000ac0 RDI: 0000000000006a65 [ 346.733673][ T1177] RBP: 00007f8f4e73dca0 R08: 0000000020000b80 R09: 0000000020000b80 [ 346.741662][ T1177] R10: 0000000020000b40 R11: 0000000000000206 R12: 0000000020ffd000 [ 346.749654][ T1177] R13: 0000000020ffd000 R14: 0000000020000b80 R15: 0000000020000b40 16:08:02 executing program 2 (fault-call:1 fault-nth:2): syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:02 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4008}}, 0x9) 16:08:02 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) [ 346.924011][ T1204] FAULT_INJECTION: forcing a failure. [ 346.924011][ T1204] name failslab, interval 1, probability 0, space 0, times 0 [ 346.958704][ T1207] FAULT_INJECTION: forcing a failure. [ 346.958704][ T1207] name failslab, interval 1, probability 0, space 0, times 0 [ 346.999457][ T1204] CPU: 0 PID: 1204 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 347.008191][ T1204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.018270][ T1204] Call Trace: [ 347.021568][ T1204] dump_stack+0x183/0x22e [ 347.025923][ T1204] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 347.031667][ T1204] ? show_regs_print_info+0x12/0x12 [ 347.036885][ T1204] ? __lock_acquire+0x5e40/0x5e40 [ 347.041934][ T1204] should_fail+0x384/0x4b0 [ 347.046377][ T1204] ? __se_sys_io_uring_setup+0x608/0x37b0 [ 347.052112][ T1204] should_failslab+0x5/0x20 [ 347.056631][ T1204] kmem_cache_alloc_trace+0x65/0x300 [ 347.061947][ T1204] ? security_capable+0xb1/0xd0 [ 347.066825][ T1204] __se_sys_io_uring_setup+0x608/0x37b0 [ 347.072398][ T1204] ? __lock_acquire+0x5e40/0x5e40 [ 347.077446][ T1204] ? file_end_write+0x220/0x220 [ 347.082327][ T1204] ? __x64_sys_io_uring_setup+0x60/0x60 [ 347.087979][ T1204] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 347.093989][ T1204] ? syscall_enter_from_user_mode+0x24/0x190 [ 347.099996][ T1204] ? syscall_enter_from_user_mode+0x24/0x190 [ 347.106002][ T1204] do_syscall_64+0x2d/0x70 [ 347.110437][ T1204] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 347.116362][ T1204] RIP: 0033:0x45e219 [ 347.120607][ T1204] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.140321][ T1204] RSP: 002b:00007fb783996be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 347.148770][ T1204] RAX: ffffffffffffffda RBX: 0000000020000ac0 RCX: 000000000045e219 [ 347.156761][ T1204] RDX: 0000000020ffd000 RSI: 0000000020000ac0 RDI: 0000000000006a65 [ 347.164746][ T1204] RBP: 00007fb783996ca0 R08: 0000000020000b80 R09: 0000000020000b80 [ 347.172733][ T1204] R10: 0000000020000b40 R11: 0000000000000206 R12: 0000000020ffd000 [ 347.180718][ T1204] R13: 0000000020ffd000 R14: 0000000020000b80 R15: 0000000020000b40 [ 347.188712][ T1207] CPU: 1 PID: 1207 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 347.197416][ T1207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.207486][ T1207] Call Trace: [ 347.210783][ T1207] dump_stack+0x183/0x22e [ 347.215138][ T1207] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 347.220882][ T1207] ? show_regs_print_info+0x12/0x12 [ 347.226100][ T1207] ? __might_sleep+0x100/0x100 [ 347.230998][ T1207] ? __lock_acquire+0x5e40/0x5e40 [ 347.236036][ T1207] ? rcu_read_lock_sched_held+0x87/0x110 [ 347.241683][ T1207] should_fail+0x384/0x4b0 [ 347.246111][ T1207] ? __se_sys_io_uring_setup+0x625/0x37b0 [ 347.251842][ T1207] should_failslab+0x5/0x20 [ 347.256352][ T1207] kmem_cache_alloc+0x62/0x2e0 [ 347.261145][ T1207] __se_sys_io_uring_setup+0x625/0x37b0 [ 347.266718][ T1207] ? __lock_acquire+0x5e40/0x5e40 [ 347.271773][ T1207] ? file_end_write+0x220/0x220 [ 347.276656][ T1207] ? __x64_sys_io_uring_setup+0x60/0x60 [ 347.282218][ T1207] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 347.288222][ T1207] ? syscall_enter_from_user_mode+0x24/0x190 [ 347.294224][ T1207] ? syscall_enter_from_user_mode+0x24/0x190 [ 347.300222][ T1207] do_syscall_64+0x2d/0x70 [ 347.304653][ T1207] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 347.310559][ T1207] RIP: 0033:0x45e219 [ 347.314463][ T1207] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.334083][ T1207] RSP: 002b:00007f8f4e73dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 347.342515][ T1207] RAX: ffffffffffffffda RBX: 0000000020000ac0 RCX: 000000000045e219 16:08:03 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) 16:08:03 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) [ 347.350501][ T1207] RDX: 0000000020ffd000 RSI: 0000000020000ac0 RDI: 0000000000006a65 [ 347.358483][ T1207] RBP: 00007f8f4e73dca0 R08: 0000000020000b80 R09: 0000000020000b80 [ 347.366474][ T1207] R10: 0000000020000b40 R11: 0000000000000206 R12: 0000000020ffd000 [ 347.374465][ T1207] R13: 0000000020ffd000 R14: 0000000020000b80 R15: 0000000020000b40 16:08:03 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) 16:08:03 executing program 5 (fault-call:1 fault-nth:2): syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:03 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:03 executing program 2 (fault-call:1 fault-nth:3): syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:03 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:03 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) [ 347.610124][ T1237] FAULT_INJECTION: forcing a failure. [ 347.610124][ T1237] name failslab, interval 1, probability 0, space 0, times 0 [ 347.675109][ T1239] FAULT_INJECTION: forcing a failure. [ 347.675109][ T1239] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 347.697658][ T1237] CPU: 0 PID: 1237 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 347.706498][ T1237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.716572][ T1237] Call Trace: [ 347.719862][ T1237] dump_stack+0x183/0x22e [ 347.724211][ T1237] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 347.729950][ T1237] ? show_regs_print_info+0x12/0x12 [ 347.735167][ T1237] ? __might_sleep+0x100/0x100 [ 347.739952][ T1237] ? __lock_acquire+0x5e40/0x5e40 [ 347.745002][ T1237] ? rcu_read_lock_sched_held+0x87/0x110 [ 347.750669][ T1237] should_fail+0x384/0x4b0 [ 347.755109][ T1237] ? __se_sys_io_uring_setup+0x625/0x37b0 [ 347.760924][ T1237] should_failslab+0x5/0x20 [ 347.765427][ T1237] kmem_cache_alloc+0x62/0x2e0 [ 347.770213][ T1237] __se_sys_io_uring_setup+0x625/0x37b0 [ 347.775767][ T1237] ? __lock_acquire+0x5e40/0x5e40 [ 347.780808][ T1237] ? file_end_write+0x220/0x220 [ 347.785689][ T1237] ? __x64_sys_io_uring_setup+0x60/0x60 [ 347.791254][ T1237] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 347.797293][ T1237] ? syscall_enter_from_user_mode+0x24/0x190 [ 347.803291][ T1237] ? syscall_enter_from_user_mode+0x24/0x190 [ 347.809401][ T1237] do_syscall_64+0x2d/0x70 [ 347.813834][ T1237] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 347.819739][ T1237] RIP: 0033:0x45e219 16:08:03 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 347.823639][ T1237] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.846213][ T1237] RSP: 002b:00007fb783996be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 347.854643][ T1237] RAX: ffffffffffffffda RBX: 0000000020000ac0 RCX: 000000000045e219 [ 347.862621][ T1237] RDX: 0000000020ffd000 RSI: 0000000020000ac0 RDI: 0000000000006a65 [ 347.870601][ T1237] RBP: 00007fb783996ca0 R08: 0000000020000b80 R09: 0000000020000b80 [ 347.878574][ T1237] R10: 0000000020000b40 R11: 0000000000000206 R12: 0000000020ffd000 [ 347.886637][ T1237] R13: 0000000020ffd000 R14: 0000000020000b80 R15: 0000000020000b40 [ 347.894622][ T1239] CPU: 1 PID: 1239 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 347.903319][ T1239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.913387][ T1239] Call Trace: [ 347.916681][ T1239] dump_stack+0x183/0x22e [ 347.921029][ T1239] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 347.926770][ T1239] ? show_regs_print_info+0x12/0x12 [ 347.931988][ T1239] ? __might_sleep+0x100/0x100 [ 347.936769][ T1239] ? __lock_acquire+0x5e40/0x5e40 [ 347.941813][ T1239] should_fail+0x384/0x4b0 [ 347.946246][ T1239] prepare_alloc_pages+0x1c5/0x5b0 [ 347.951491][ T1239] __alloc_pages_nodemask+0x129/0x5a0 [ 347.956890][ T1239] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 347.962466][ T1239] ? alloc_pages_current+0x2e5/0x520 [ 347.967773][ T1239] kmalloc_order+0x40/0x130 [ 347.972362][ T1239] kmalloc_order_trace+0x15/0x70 [ 347.977316][ T1239] __kmalloc+0x257/0x330 [ 347.981573][ T1239] ? trace_kmem_cache_alloc+0x43/0xe0 [ 347.986965][ T1239] ? kmem_cache_alloc+0x80/0x2e0 [ 347.991923][ T1239] __se_sys_io_uring_setup+0x711/0x37b0 [ 347.997493][ T1239] ? __lock_acquire+0x5e40/0x5e40 [ 348.002578][ T1239] ? __x64_sys_io_uring_setup+0x60/0x60 [ 348.008157][ T1239] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 348.014164][ T1239] ? syscall_enter_from_user_mode+0x24/0x190 [ 348.020162][ T1239] ? syscall_enter_from_user_mode+0x24/0x190 [ 348.026162][ T1239] do_syscall_64+0x2d/0x70 [ 348.030593][ T1239] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 348.036502][ T1239] RIP: 0033:0x45e219 [ 348.040405][ T1239] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.060052][ T1239] RSP: 002b:00007f8f4e73dbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 348.068481][ T1239] RAX: ffffffffffffffda RBX: 0000000020000ac0 RCX: 000000000045e219 16:08:03 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) [ 348.076471][ T1239] RDX: 0000000020ffd000 RSI: 0000000020000ac0 RDI: 0000000000006a65 [ 348.084459][ T1239] RBP: 00007f8f4e73dca0 R08: 0000000020000b80 R09: 0000000020000b80 [ 348.092447][ T1239] R10: 0000000020000b40 R11: 0000000000000206 R12: 0000000020ffd000 [ 348.100435][ T1239] R13: 0000000020ffd000 R14: 0000000020000b80 R15: 0000000020000b40 16:08:03 executing program 5 (fault-call:1 fault-nth:3): syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:03 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) 16:08:03 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0xfef6, 0x0, 0x2, 0x150, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:03 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) 16:08:03 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) [ 348.291393][ T1264] FAULT_INJECTION: forcing a failure. [ 348.291393][ T1264] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 348.384642][ T1264] CPU: 1 PID: 1264 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 348.393375][ T1264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.403448][ T1264] Call Trace: [ 348.406747][ T1264] dump_stack+0x183/0x22e [ 348.411094][ T1264] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 348.416950][ T1264] ? show_regs_print_info+0x12/0x12 [ 348.422168][ T1264] ? __might_sleep+0x100/0x100 [ 348.426949][ T1264] ? __lock_acquire+0x5e40/0x5e40 [ 348.432000][ T1264] should_fail+0x384/0x4b0 [ 348.436438][ T1264] prepare_alloc_pages+0x1c5/0x5b0 [ 348.441584][ T1264] __alloc_pages_nodemask+0x129/0x5a0 [ 348.446981][ T1264] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 348.452560][ T1264] ? alloc_pages_current+0x2e5/0x520 [ 348.457870][ T1264] kmalloc_order+0x40/0x130 [ 348.462403][ T1264] kmalloc_order_trace+0x15/0x70 [ 348.467366][ T1264] __kmalloc+0x257/0x330 [ 348.471629][ T1264] ? trace_kmem_cache_alloc+0x43/0xe0 [ 348.477019][ T1264] ? kmem_cache_alloc+0x80/0x2e0 [ 348.482016][ T1264] __se_sys_io_uring_setup+0x711/0x37b0 [ 348.487589][ T1264] ? __lock_acquire+0x5e40/0x5e40 [ 348.492652][ T1264] ? __x64_sys_io_uring_setup+0x60/0x60 [ 348.498217][ T1264] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 348.504235][ T1264] ? syscall_enter_from_user_mode+0x24/0x190 [ 348.510272][ T1264] ? syscall_enter_from_user_mode+0x24/0x190 [ 348.516273][ T1264] do_syscall_64+0x2d/0x70 [ 348.520706][ T1264] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 348.526607][ T1264] RIP: 0033:0x45e219 [ 348.530518][ T1264] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.550139][ T1264] RSP: 002b:00007fb783996be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 348.558578][ T1264] RAX: ffffffffffffffda RBX: 0000000020000ac0 RCX: 000000000045e219 [ 348.566566][ T1264] RDX: 0000000020ffd000 RSI: 0000000020000ac0 RDI: 0000000000006a65 [ 348.574554][ T1264] RBP: 00007fb783996ca0 R08: 0000000020000b80 R09: 0000000020000b80 [ 348.582547][ T1264] R10: 0000000020000b40 R11: 0000000000000206 R12: 0000000020ffd000 [ 348.590537][ T1264] R13: 0000000020ffd000 R14: 0000000020000b80 R15: 0000000020000b40 16:08:04 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) 16:08:04 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) 16:08:04 executing program 2: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:04 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) 16:08:04 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, 0x1403, 0x4, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) 16:08:04 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000900)={0x1, 0x2, 0x1, 0xe03, 0xff, 0x400}) 16:08:04 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') 16:08:04 executing program 5 (fault-call:1 fault-nth:4): syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:04 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) 16:08:04 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) 16:08:04 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5940724147b8b333) 16:08:04 executing program 2: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a25, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:04 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) [ 349.172543][ T1319] FAULT_INJECTION: forcing a failure. [ 349.172543][ T1319] name failslab, interval 1, probability 0, space 0, times 0 [ 349.208999][ T1319] CPU: 0 PID: 1319 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 349.217729][ T1319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.227805][ T1319] Call Trace: [ 349.231099][ T1319] dump_stack+0x183/0x22e [ 349.235445][ T1319] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 349.241177][ T1319] ? show_regs_print_info+0x12/0x12 [ 349.246389][ T1319] ? __might_sleep+0x100/0x100 [ 349.251166][ T1319] ? __lock_acquire+0x5e40/0x5e40 [ 349.256201][ T1319] should_fail+0x384/0x4b0 [ 349.260631][ T1319] ? percpu_ref_init+0xce/0x300 [ 349.265566][ T1319] should_failslab+0x5/0x20 [ 349.270078][ T1319] kmem_cache_alloc_trace+0x65/0x300 [ 349.275392][ T1319] ? trace_kmalloc+0x43/0xe0 [ 349.279997][ T1319] ? kmalloc_order_trace+0x41/0x70 [ 349.285126][ T1319] percpu_ref_init+0xce/0x300 [ 349.289817][ T1319] ? trace_io_uring_create+0x250/0x250 [ 349.295354][ T1319] __se_sys_io_uring_setup+0x780/0x37b0 [ 349.300925][ T1319] ? __lock_acquire+0x5e40/0x5e40 [ 349.305987][ T1319] ? __x64_sys_io_uring_setup+0x60/0x60 [ 349.311553][ T1319] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 349.317564][ T1319] ? syscall_enter_from_user_mode+0x24/0x190 [ 349.323564][ T1319] ? syscall_enter_from_user_mode+0x24/0x190 [ 349.329565][ T1319] do_syscall_64+0x2d/0x70 [ 349.333993][ T1319] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 349.339902][ T1319] RIP: 0033:0x45e219 [ 349.343804][ T1319] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.363457][ T1319] RSP: 002b:00007fb783996be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 16:08:04 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, 0xffffffffffffffff, 0x8000000) 16:08:04 executing program 2: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:05 executing program 0: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a25, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:05 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) 16:08:05 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') [ 349.371896][ T1319] RAX: ffffffffffffffda RBX: 0000000020000ac0 RCX: 000000000045e219 [ 349.379894][ T1319] RDX: 0000000020ffd000 RSI: 0000000020000ac0 RDI: 0000000000006a65 [ 349.387895][ T1319] RBP: 00007fb783996ca0 R08: 0000000020000b80 R09: 0000000020000b80 [ 349.395891][ T1319] R10: 0000000020000b40 R11: 0000000000000206 R12: 0000000020ffd000 [ 349.403908][ T1319] R13: 0000000020ffd000 R14: 0000000020000b80 R15: 0000000020000b40 16:08:05 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) 16:08:05 executing program 5 (fault-call:1 fault-nth:5): syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:05 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) 16:08:05 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, 0xffffffffffffffff, 0x8000000) 16:08:05 executing program 2: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:05 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x578}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20000890) 16:08:05 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) 16:08:05 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, 0xffffffffffffffff, 0x8000000) [ 349.801963][ T1356] FAULT_INJECTION: forcing a failure. [ 349.801963][ T1356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 16:08:05 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) [ 349.890437][ T1356] CPU: 0 PID: 1356 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 349.899164][ T1356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.909236][ T1356] Call Trace: [ 349.912526][ T1356] dump_stack+0x183/0x22e [ 349.916881][ T1356] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 349.922620][ T1356] ? show_regs_print_info+0x12/0x12 [ 349.927835][ T1356] ? __might_sleep+0x100/0x100 [ 349.932619][ T1356] ? __lock_acquire+0x5e40/0x5e40 16:08:05 executing program 2: syz_genetlink_get_family_id$batadv(0x0) syz_io_uring_setup(0x6a65, &(0x7f0000000ac0)={0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 16:08:05 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) 16:08:05 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x19}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000081) [ 349.937666][ T1356] should_fail+0x384/0x4b0 [ 349.942098][ T1356] prepare_alloc_pages+0x1c5/0x5b0 [ 349.947234][ T1356] __alloc_pages_nodemask+0x129/0x5a0 [ 349.952628][ T1356] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 349.958201][ T1356] ? alloc_pages_current+0x2e5/0x520 [ 349.963504][ T1356] __get_free_pages+0x8/0x30 [ 349.968105][ T1356] __se_sys_io_uring_setup+0x15d0/0x37b0 [ 349.973782][ T1356] ? __x64_sys_io_uring_setup+0x60/0x60 [ 349.979347][ T1356] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 349.985361][ T1356] ? syscall_enter_from_user_mode+0x24/0x190 [ 349.991368][ T1356] ? syscall_enter_from_user_mode+0x24/0x190 [ 349.997372][ T1356] do_syscall_64+0x2d/0x70 [ 350.001808][ T1356] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 350.007824][ T1356] RIP: 0033:0x45e219 [ 350.011726][ T1356] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.031344][ T1356] RSP: 002b:00007fb783996be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 350.039781][ T1356] RAX: ffffffffffffffda RBX: 0000000020000ac0 RCX: 000000000045e219 [ 350.047775][ T1356] RDX: 0000000020ffd000 RSI: 0000000020000ac0 RDI: 0000000000006a65 [ 350.055758][ T1356] RBP: 00007fb783996ca0 R08: 0000000020000b80 R09: 0000000020000b80 [ 350.063741][ T1356] R10: 0000000020000b40 R11: 0000000000000206 R12: 0000000020ffd000 [ 350.071822][ T1356] R13: 0000000020ffd000 R14: 0000000020000b80 R15: 0000000020000b40 16:08:05 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x550bedd83078379e, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000400) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x704, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc8a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x880) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x1400, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r4, 0x8000000) [ 350.249816][ T1356] general protection fault, probably for non-canonical address 0xdffffc0000000022: 0000 [#1] PREEMPT SMP KASAN [ 350.261569][ T1356] KASAN: null-ptr-deref in range [0x0000000000000110-0x0000000000000117] [ 350.269980][ T1356] CPU: 0 PID: 1356 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 350.278691][ T1356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.288749][ T1356] RIP: 0010:__se_sys_io_uring_setup+0x2abb/0x37b0 [ 350.295182][ T1356] Code: c0 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c5 31 de ff 41 be 14 01 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 46 06 00 00 41 80 0e 01 48 8b 7c 24 30 e8 [ 350.314800][ T1356] RSP: 0018:ffffc900087c7ca0 EFLAGS: 00010007 [ 350.320877][ T1356] RAX: 0000000000000022 RBX: ffff8880143590c0 RCX: 0000000000000001 [ 350.328856][ T1356] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900087c7b80 [ 350.336836][ T1356] RBP: ffffc900087c7f38 R08: dffffc0000000000 R09: 0000000000000003 [ 350.344812][ T1356] R10: fffff520010f8f71 R11: 0000000000000004 R12: 0000000000000001 [ 350.352789][ T1356] R13: dffffc0000000000 R14: 0000000000000114 R15: 00000000fffffff4 [ 350.360760][ T1356] FS: 00007fb783997700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 350.369693][ T1356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.376278][ T1356] CR2: 0000000000000000 CR3: 0000000029beb000 CR4: 00000000001506f0 [ 350.384248][ T1356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.392223][ T1356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 350.400195][ T1356] Call Trace: [ 350.403487][ T1356] ? __x64_sys_io_uring_setup+0x60/0x60 [ 350.409044][ T1356] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 350.415036][ T1356] ? syscall_enter_from_user_mode+0x24/0x190 [ 350.421023][ T1356] ? syscall_enter_from_user_mode+0x24/0x190 [ 350.427012][ T1356] do_syscall_64+0x2d/0x70 [ 350.431496][ T1356] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 350.437380][ T1356] RIP: 0033:0x45e219 [ 350.441254][ T1356] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.460840][ T1356] RSP: 002b:00007fb783996be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 350.469236][ T1356] RAX: ffffffffffffffda RBX: 0000000020000ac0 RCX: 000000000045e219 [ 350.477190][ T1356] RDX: 0000000020ffd000 RSI: 0000000020000ac0 RDI: 0000000000006a65 [ 350.485143][ T1356] RBP: 00007fb783996ca0 R08: 0000000020000b80 R09: 0000000020000b80 [ 350.493100][ T1356] R10: 0000000020000b40 R11: 0000000000000206 R12: 0000000020ffd000 [ 350.501097][ T1356] R13: 0000000020ffd000 R14: 0000000020000b80 R15: 0000000020000b40 [ 350.509055][ T1356] Modules linked in: [ 350.516319][ T1356] ---[ end trace 25625369341d61dc ]--- [ 350.521758][ T1356] RIP: 0010:__se_sys_io_uring_setup+0x2abb/0x37b0 [ 350.528154][ T1356] Code: c0 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c5 31 de ff 41 be 14 01 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 46 06 00 00 41 80 0e 01 48 8b 7c 24 30 e8 [ 350.547893][ T1356] RSP: 0018:ffffc900087c7ca0 EFLAGS: 00010007 [ 350.553959][ T1356] RAX: 0000000000000022 RBX: ffff8880143590c0 RCX: 0000000000000001 [ 350.561929][ T1356] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900087c7b80 [ 350.569882][ T1356] RBP: ffffc900087c7f38 R08: dffffc0000000000 R09: 0000000000000003 [ 350.577836][ T1356] R10: fffff520010f8f71 R11: 0000000000000004 R12: 0000000000000001 [ 350.585790][ T1356] R13: dffffc0000000000 R14: 0000000000000114 R15: 00000000fffffff4 [ 350.593762][ T1356] FS: 00007fb783997700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 350.602670][ T1356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.609232][ T1356] CR2: 0000000000000000 CR3: 0000000029beb000 CR4: 00000000001506f0 [ 350.617192][ T1356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.625158][ T1356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 350.633111][ T1356] Kernel panic - not syncing: Fatal exception [ 350.639775][ T1356] Kernel Offset: disabled [ 350.644085][ T1356] Rebooting in 86400 seconds..