={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 19:39:11 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0xc, r3, 0x1, 0x5, 0x6, @random="2cb6bf104b0b"}, 0x14) 19:39:11 executing program 2: socket$inet(0x2, 0x5, 0x21) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x471}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x40}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x55}]}, 0x30}, 0x1, 0x0, 0x0, 0x480cd}, 0x0) (async) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x2c) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) 19:39:11 executing program 1: r0 = socket(0x22, 0x5, 0x0) accept$packet(r0, 0x0, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x0) sendto$packet(r1, &(0x7f0000000080)="9a927c2d1e1e9d1f1108b271e138ef7242fb840f3b0d2f7506a15c1525a894c7efccd8ac6edeb4eaedf7da59057deeae29709053a0dc3d77f27ae74e4c5998c8266209a3e68007a60f4738a17c3a0e9854f010060992bde4998f6f6da90bf46caf7cb09c24c17e746078abef0a7b9016e1ac84edb1954f1dea3c32a6e5d28a3fd7fa5c24d47815004229eb214d0c4027f124a0bec1d6bbe42596bc4a7614940de7e9b9243269155b4cd02d3a92fecfe2878d598d508d7991aa82ef", 0xbb, 0x881, 0x0, 0x0) 19:39:12 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async) bind$packet(r1, &(0x7f0000000000)={0x11, 0xc, r3, 0x1, 0x5, 0x6, @random="2cb6bf104b0b"}, 0x14) 19:39:12 executing program 1: r0 = socket(0x22, 0x5, 0x0) accept$packet(r0, 0x0, 0x0) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x0) sendto$packet(r1, &(0x7f0000000080)="9a927c2d1e1e9d1f1108b271e138ef7242fb840f3b0d2f7506a15c1525a894c7efccd8ac6edeb4eaedf7da59057deeae29709053a0dc3d77f27ae74e4c5998c8266209a3e68007a60f4738a17c3a0e9854f010060992bde4998f6f6da90bf46caf7cb09c24c17e746078abef0a7b9016e1ac84edb1954f1dea3c32a6e5d28a3fd7fa5c24d47815004229eb214d0c4027f124a0bec1d6bbe42596bc4a7614940de7e9b9243269155b4cd02d3a92fecfe2878d598d508d7991aa82ef", 0xbb, 0x881, 0x0, 0x0) 19:39:12 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r0, 0x0, &(0x7f0000000000), 0x80000) (async) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000041, 0x0, 0x0) (async) recvfrom$packet(r2, 0x0, 0x0, 0x10120, 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000100)=0xfffffffb, 0x4) accept$packet(r2, 0x0, &(0x7f0000000080)) (async) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x6) 19:39:12 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) 19:39:12 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) socket$inet(0x2, 0x2, 0x1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) (async) 19:39:12 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0xc, r3, 0x1, 0x5, 0x6, @random="2cb6bf104b0b"}, 0x14) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async) bind$packet(r1, &(0x7f0000000000)={0x11, 0xc, r3, 0x1, 0x5, 0x6, @random="2cb6bf104b0b"}, 0x14) (async) 19:39:12 executing program 2: socket$inet(0x2, 0x2, 0x1) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) 19:39:12 executing program 1: r0 = socket(0x22, 0x5, 0x0) accept$packet(r0, 0x0, 0x0) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x0) sendto$packet(r1, &(0x7f0000000080)="9a927c2d1e1e9d1f1108b271e138ef7242fb840f3b0d2f7506a15c1525a894c7efccd8ac6edeb4eaedf7da59057deeae29709053a0dc3d77f27ae74e4c5998c8266209a3e68007a60f4738a17c3a0e9854f010060992bde4998f6f6da90bf46caf7cb09c24c17e746078abef0a7b9016e1ac84edb1954f1dea3c32a6e5d28a3fd7fa5c24d47815004229eb214d0c4027f124a0bec1d6bbe42596bc4a7614940de7e9b9243269155b4cd02d3a92fecfe2878d598d508d7991aa82ef", 0xbb, 0x881, 0x0, 0x0) 19:39:12 executing program 2: socketpair(0x9, 0x5, 0xd1, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) connect$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x51d, @mcast1, 0xc5, 0x3}, 0x20) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x2f, 0x6, 0x3, 0x2, 0x9, @private0, @loopback, 0x700, 0x40, 0x80, 0x8001}}) socket$inet(0x2, 0x2, 0x1) 19:39:12 executing program 4: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0xfffffff9, 0xfffff6a4, 0x3, 0x3, 0x7ff, 0x9, 0x8001}, 0x1c) r0 = socket(0x25, 0x3, 0x80000003) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:12 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket(0x22, 0x4, 0x2) read$watch_queue(0xffffffffffffffff, &(0x7f0000000040)=""/230, 0xe6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x2, 0x4) 19:39:12 executing program 2: socketpair(0x9, 0x5, 0xd1, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) connect$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x51d, @mcast1, 0xc5, 0x3}, 0x20) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x2f, 0x6, 0x3, 0x2, 0x9, @private0, @loopback, 0x700, 0x40, 0x80, 0x8001}}) socket$inet(0x2, 0x2, 0x1) socketpair(0x9, 0x5, 0xd1, &(0x7f0000000000)) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) connect$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x51d, @mcast1, 0xc5, 0x3}, 0x20) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x2f, 0x6, 0x3, 0x2, 0x9, @private0, @loopback, 0x700, 0x40, 0x80, 0x8001}}) (async) socket$inet(0x2, 0x2, 0x1) (async) 19:39:12 executing program 4: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0xfffffff9, 0xfffff6a4, 0x3, 0x3, 0x7ff, 0x9, 0x8001}, 0x1c) (async) r0 = socket(0x25, 0x3, 0x80000003) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:12 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket(0x22, 0x4, 0x2) read$watch_queue(0xffffffffffffffff, &(0x7f0000000040)=""/230, 0xe6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x2, 0x4) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) socket(0x22, 0x4, 0x2) (async) read$watch_queue(0xffffffffffffffff, &(0x7f0000000040)=""/230, 0xe6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x2, 0x4) (async) 19:39:12 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r0, 0x0, &(0x7f0000000000), 0x80000) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000041, 0x0, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x10120, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$packet(0x11, 0x3, 0x300) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000100)=0xfffffffb, 0x4) accept$packet(r2, 0x0, &(0x7f0000000080)) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x6) socket$packet(0x11, 0x2, 0x300) (async) accept4$packet(r0, 0x0, &(0x7f0000000000), 0x80000) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000041, 0x0, 0x0) (async) recvfrom$packet(r2, 0x0, 0x0, 0x10120, 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000100)=0xfffffffb, 0x4) (async) accept$packet(r2, 0x0, &(0x7f0000000080)) (async) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x6) (async) 19:39:12 executing program 2: socketpair(0x9, 0x5, 0xd1, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) connect$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x51d, @mcast1, 0xc5, 0x3}, 0x20) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x2f, 0x6, 0x3, 0x2, 0x9, @private0, @loopback, 0x700, 0x40, 0x80, 0x8001}}) (async) socket$inet(0x2, 0x2, 0x1) 19:39:12 executing program 4: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0xfffffff9, 0xfffff6a4, 0x3, 0x3, 0x7ff, 0x9, 0x8001}, 0x1c) (async) r0 = socket(0x25, 0x3, 0x80000003) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:12 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket(0x22, 0x4, 0x2) read$watch_queue(0xffffffffffffffff, &(0x7f0000000040)=""/230, 0xe6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x2, 0x4) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) socket(0x22, 0x4, 0x2) (async) read$watch_queue(0xffffffffffffffff, &(0x7f0000000040)=""/230, 0xe6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x2, 0x4) (async) 19:39:12 executing program 1: r0 = socket(0xa, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x1, 0x0, 0x40}, {0xfffb, 0xff, 0x3, 0x2}]}, 0x10) 19:39:12 executing program 2: socket$inet(0x2, 0x0, 0x1001) 19:39:12 executing program 4: r0 = socket(0x25, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:12 executing program 1: r0 = socket(0xa, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x1, 0x0, 0x40}, {0xfffb, 0xff, 0x3, 0x2}]}, 0x10) 19:39:12 executing program 3: recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40008001, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) socket(0x2a, 0x1, 0x3ff000) socketpair(0x0, 0x106d7a9cef99aed6, 0x7, &(0x7f0000000040)) socketpair(0x8, 0x6, 0x1, &(0x7f0000000080)) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000240)='syz1\x00') getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000000c0)={0x5e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblc\x00', 0x21, 0x9, 0x65}, 0x2c) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r5) 19:39:12 executing program 2: socket$inet(0x2, 0x0, 0x1001) socket$inet(0x2, 0x0, 0x1001) (async) 19:39:12 executing program 4: r0 = socket(0x25, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x25, 0x5, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) 19:39:13 executing program 2: socket$inet(0x2, 0x0, 0x1001) 19:39:13 executing program 4: r0 = socket(0x25, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x25, 0x5, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) 19:39:13 executing program 3: recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40008001, 0x0, 0x0) (async) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) socket(0x2a, 0x1, 0x3ff000) (async) socketpair(0x0, 0x106d7a9cef99aed6, 0x7, &(0x7f0000000040)) (async) socketpair(0x8, 0x6, 0x1, &(0x7f0000000080)) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000240)='syz1\x00') (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000000c0)={0x5e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblc\x00', 0x21, 0x9, 0x65}, 0x2c) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r5) 19:39:13 executing program 1: r0 = socket(0xa, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x1, 0x0, 0x40}, {0xfffb, 0xff, 0x3, 0x2}]}, 0x10) 19:39:13 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x758b7437, @local, 0x7, 0x2}, 0x20) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000000) 19:39:13 executing program 2: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000400)={r0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x10081, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x7, 0x200cc1) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x80, 0x4, 0x20, 0x9}, {0x4e, 0x40, 0x29, 0x7}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESHEX=r4, @ANYRES8=r3, @ANYRES32=r2, @ANYRES8=r1], 0x7b}, 0x1, 0x0, 0x0, 0x240040d5}, 0x44000800) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x4, 0x900) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000340)={0x4}) socket$inet(0x2, 0x2, 0x1) 19:39:13 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x758b7437, @local, 0x7, 0x2}, 0x20) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000000) 19:39:13 executing program 3: recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40008001, 0x0, 0x0) (async) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) socket(0x2a, 0x1, 0x3ff000) (async) socketpair(0x0, 0x106d7a9cef99aed6, 0x7, &(0x7f0000000040)) (async) socketpair(0x8, 0x6, 0x1, &(0x7f0000000080)) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000240)='syz1\x00') (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000000c0)={0x5e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblc\x00', 0x21, 0x9, 0x65}, 0x2c) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r5) 19:39:13 executing program 1: r0 = socket(0x22, 0x3, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) accept$packet(r0, 0x0, 0x0) 19:39:13 executing program 2: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000400)={r0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x10081, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x7, 0x200cc1) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x80, 0x4, 0x20, 0x9}, {0x4e, 0x40, 0x29, 0x7}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESHEX=r4, @ANYRES8=r3, @ANYRES32=r2, @ANYRES8=r1], 0x7b}, 0x1, 0x0, 0x0, 0x240040d5}, 0x44000800) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x4, 0x900) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000340)={0x4}) socket$inet(0x2, 0x2, 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000400)={r0}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x10081, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x7, 0x200cc1) (async) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x80, 0x4, 0x20, 0x9}, {0x4e, 0x40, 0x29, 0x7}]}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESHEX=r4, @ANYRES8=r3, @ANYRES32=r2, @ANYRES8=r1], 0x7b}, 0x1, 0x0, 0x0, 0x240040d5}, 0x44000800) (async) syz_open_dev$dri(&(0x7f0000000300), 0x4, 0x900) (async) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000340)={0x4}) (async) socket$inet(0x2, 0x2, 0x1) (async) 19:39:13 executing program 4: r0 = socket(0x25, 0x5, 0x0) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x758b7437, @local, 0x7, 0x2}, 0x20) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000000) 19:39:13 executing program 1: r0 = socket(0x22, 0x3, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) (async) accept$packet(r0, 0x0, 0x0) 19:39:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:39:13 executing program 4: r0 = socket(0x10, 0x5, 0xfffffff7) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x800) getsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:13 executing program 1: r0 = socket(0x22, 0x3, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) (async) accept$packet(r0, 0x0, 0x0) 19:39:13 executing program 2: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000400)={r0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x10081, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x7, 0x200cc1) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x80, 0x4, 0x20, 0x9}, {0x4e, 0x40, 0x29, 0x7}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESHEX=r4, @ANYRES8=r3, @ANYRES32=r2, @ANYRES8=r1], 0x7b}, 0x1, 0x0, 0x0, 0x240040d5}, 0x44000800) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x4, 0x900) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000340)={0x4}) socket$inet(0x2, 0x2, 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000400)={r0}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x10081, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x7, 0x200cc1) (async) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x80, 0x4, 0x20, 0x9}, {0x4e, 0x40, 0x29, 0x7}]}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESHEX=r4, @ANYRES8=r3, @ANYRES32=r2, @ANYRES8=r1], 0x7b}, 0x1, 0x0, 0x0, 0x240040d5}, 0x44000800) (async) syz_open_dev$dri(&(0x7f0000000300), 0x4, 0x900) (async) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000340)={0x4}) (async) socket$inet(0x2, 0x2, 0x1) (async) 19:39:13 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000000)="27d7a81b2c403a9864af2c750ac77a6278f3e4e650ea653c0cbba3d85ff7d28b58e17f0f94820de454bbadb61b828122e2567615992efcc692d1d678022c894697ed35df2da35f5f6ab63df3185567241c8818022ec0b72fca74e8d3425e57f22d5755bb23a6e090d6f7a01aa290a810165f1dcd3c5c7a92abb40e5f3a50b118d68e1a31c576db3069e6bd8917f55c4b47cf242c872289026eeeb972227cd1d712a42c95b882c2fde42a64c32ffa3f2f43a3f5e8a9f8066b881ba13075c53657e62c1d3623eefd4b6d4dade78a452238dff3cce69f09b8f7c47c6bb8216605a6d12af7e04bf306914af92b") 19:39:13 executing program 4: r0 = socket(0x10, 0x5, 0xfffffff7) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x800) getsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:13 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000000)="27d7a81b2c403a9864af2c750ac77a6278f3e4e650ea653c0cbba3d85ff7d28b58e17f0f94820de454bbadb61b828122e2567615992efcc692d1d678022c894697ed35df2da35f5f6ab63df3185567241c8818022ec0b72fca74e8d3425e57f22d5755bb23a6e090d6f7a01aa290a810165f1dcd3c5c7a92abb40e5f3a50b118d68e1a31c576db3069e6bd8917f55c4b47cf242c872289026eeeb972227cd1d712a42c95b882c2fde42a64c32ffa3f2f43a3f5e8a9f8066b881ba13075c53657e62c1d3623eefd4b6d4dade78a452238dff3cce69f09b8f7c47c6bb8216605a6d12af7e04bf306914af92b") socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000000)="27d7a81b2c403a9864af2c750ac77a6278f3e4e650ea653c0cbba3d85ff7d28b58e17f0f94820de454bbadb61b828122e2567615992efcc692d1d678022c894697ed35df2da35f5f6ab63df3185567241c8818022ec0b72fca74e8d3425e57f22d5755bb23a6e090d6f7a01aa290a810165f1dcd3c5c7a92abb40e5f3a50b118d68e1a31c576db3069e6bd8917f55c4b47cf242c872289026eeeb972227cd1d712a42c95b882c2fde42a64c32ffa3f2f43a3f5e8a9f8066b881ba13075c53657e62c1d3623eefd4b6d4dade78a452238dff3cce69f09b8f7c47c6bb8216605a6d12af7e04bf306914af92b") (async) 19:39:13 executing program 4: r0 = socket(0x10, 0x5, 0xfffffff7) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x800) getsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 64) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) 19:39:13 executing program 2: socketpair(0x3, 0x5, 0xffff, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x1, 0x1, 0x6}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) recvfrom$packet(r0, &(0x7f0000000080)=""/96, 0x60, 0x40000000, &(0x7f0000000100)={0x11, 0x19, r2, 0x1, 0xb2, 0x6, @broadcast}, 0x14) socket$inet(0x2, 0x6, 0x3c) 19:39:13 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000000)="27d7a81b2c403a9864af2c750ac77a6278f3e4e650ea653c0cbba3d85ff7d28b58e17f0f94820de454bbadb61b828122e2567615992efcc692d1d678022c894697ed35df2da35f5f6ab63df3185567241c8818022ec0b72fca74e8d3425e57f22d5755bb23a6e090d6f7a01aa290a810165f1dcd3c5c7a92abb40e5f3a50b118d68e1a31c576db3069e6bd8917f55c4b47cf242c872289026eeeb972227cd1d712a42c95b882c2fde42a64c32ffa3f2f43a3f5e8a9f8066b881ba13075c53657e62c1d3623eefd4b6d4dade78a452238dff3cce69f09b8f7c47c6bb8216605a6d12af7e04bf306914af92b") 19:39:13 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x3}, 0x20) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000480)={0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x20000801}, 0x4048080) 19:39:13 executing program 2: socketpair(0x3, 0x5, 0xffff, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x1, 0x1, 0x6}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) recvfrom$packet(r0, &(0x7f0000000080)=""/96, 0x60, 0x40000000, &(0x7f0000000100)={0x11, 0x19, r2, 0x1, 0xb2, 0x6, @broadcast}, 0x14) (async) socket$inet(0x2, 0x6, 0x3c) 19:39:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 19:39:13 executing program 1: r0 = socket(0xf, 0x3, 0x8001) accept$packet(r0, 0x0, 0x0) 19:39:13 executing program 4: r0 = socket(0x25, 0x5, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)) (async) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x3}, 0x20) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000480)={0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x20000801}, 0x4048080) 19:39:13 executing program 2: socketpair(0x3, 0x5, 0xffff, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x1, 0x1, 0x6}, 0x10) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) recvfrom$packet(r0, &(0x7f0000000080)=""/96, 0x60, 0x40000000, &(0x7f0000000100)={0x11, 0x19, r2, 0x1, 0xb2, 0x6, @broadcast}, 0x14) (async, rerun: 64) socket$inet(0x2, 0x6, 0x3c) (rerun: 64) 19:39:13 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x3}, 0x20) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000480)={0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x20000801}, 0x4048080) socket(0x25, 0x5, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)) (async) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x3}, 0x20) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) sendmsg$rds(r3, &(0x7f0000000480)={0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x20000801}, 0x4048080) (async) 19:39:13 executing program 1: r0 = socket(0xf, 0x3, 0x8001) accept$packet(r0, 0x0, 0x0) 19:39:13 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x9, 0x80000, 0x401) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000040)=0x5dc6) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="79000001", @ANYRES8=r0, @ANYRESDEC=r1, @ANYRES64=r2, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) 19:39:13 executing program 1: r0 = socket(0xf, 0x3, 0x8001) accept$packet(r0, 0x0, 0x0) 19:39:13 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x9, 0x80000, 0x401) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000040)=0x5dc6) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="79000001", @ANYRES8=r0, @ANYRESDEC=r1, @ANYRES64=r2, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) socket(0x9, 0x80000, 0x401) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000040)=0x5dc6) (async) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="79000001", @ANYRES8=r0, @ANYRESDEC=r1, @ANYRES64=r2, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) (async) 19:39:14 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x3f, 0x0, 0x39, 0x5, "b904f1243cd3a695f539ef1af3d12893467cdafd7dd36916c18d3e58b65aab"}}}, 0x27) accept$packet(r0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x100000) 19:39:14 executing program 1: r0 = socket(0x22, 0x3, 0x0) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x3f, 0x0, 0x39, 0x5, "b904f1243cd3a695f539ef1af3d12893467cdafd7dd36916c18d3e58b65aab"}}}, 0x27) (async, rerun: 32) accept$packet(r0, 0x0, 0x0) (rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x100000) 19:39:14 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x9, 0x80000, 0x401) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000040)=0x5dc6) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="79000001", @ANYRES8=r0, @ANYRESDEC=r1, @ANYRES64=r2, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) socket(0x9, 0x80000, 0x401) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000040)=0x5dc6) (async) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="79000001", @ANYRES8=r0, @ANYRESDEC=r1, @ANYRES64=r2, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) (async) 19:39:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 19:39:14 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x3f, 0x0, 0x39, 0x5, "b904f1243cd3a695f539ef1af3d12893467cdafd7dd36916c18d3e58b65aab"}}}, 0x27) (async) accept$packet(r0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x100000) 19:39:14 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40805}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000000)={'syz1\x00', {0x1000, 0x800, 0x308e, 0xb12f}, 0x56, [0xfff, 0x0, 0x0, 0xd90, 0x8, 0x1000, 0x3f, 0xffff, 0x6, 0x81, 0xf2, 0x6, 0xffffffe1, 0x3, 0x10001, 0x0, 0x72, 0x4, 0x6, 0x0, 0x1, 0x1, 0x5, 0x4, 0x7, 0x8000, 0x66b5, 0x5, 0x9, 0x2, 0x7, 0x6, 0xfffffff8, 0x80000001, 0x7f, 0xd51a, 0x3, 0x6, 0x29, 0x200, 0x1, 0x3, 0x6, 0x9, 0x3, 0xe922, 0x3ff, 0x0, 0x5, 0x3, 0xffffffff, 0x80000000, 0x2, 0x3, 0x101, 0x5, 0x5, 0x20, 0x0, 0x7, 0x1, 0x6, 0x800, 0x6], [0x9f1, 0x10001, 0x3, 0x1, 0x401, 0x3, 0x29, 0x1, 0x3, 0x10001, 0x1, 0x3f, 0x56, 0x47b000, 0x6, 0xb7f, 0x7, 0x5c4, 0x1ff, 0xfffffffb, 0x2, 0x826, 0x0, 0xf82c, 0xc1, 0xe35, 0x1ed, 0x5, 0x0, 0x14be, 0x80000000, 0xff, 0x8000, 0x7fff, 0x0, 0x3, 0x3, 0x0, 0x6, 0x6, 0x8001, 0x7, 0x100, 0x10001, 0x7, 0x0, 0x10001, 0x7, 0xee44, 0xfff, 0xa11c, 0x1800, 0x6, 0x0, 0x7fff, 0x3, 0x1e, 0xfff, 0x5, 0x3, 0x8, 0x80000001, 0xa0, 0x7fffffff], [0x3, 0x5, 0x6, 0x20, 0x5, 0xffffffff, 0x40, 0x7fffffff, 0x5, 0xffffffff, 0x0, 0x6, 0xdc7, 0x9, 0x2, 0x1, 0x4, 0xdeb5, 0x8, 0x15, 0x276, 0x1f, 0x8, 0x7f, 0x81, 0x6, 0x5, 0x9ed, 0xca0, 0x7, 0x1ff, 0x4, 0x7fff, 0x418, 0x1000, 0x80000000, 0x0, 0x8001, 0x94, 0x8001, 0x6, 0x8, 0x7fff, 0x10000, 0x9f28, 0x4, 0x200, 0x0, 0x8, 0x6, 0x1, 0x3, 0x1ff, 0x2fb4e827, 0x200, 0x2, 0x3, 0x3b, 0xf543, 0x1, 0x1, 0x6, 0x400, 0x7f], [0xf9f, 0x5, 0x7, 0x81, 0x288, 0x5, 0x4, 0xb, 0x10001, 0xfbd, 0x9, 0x3ff, 0x4, 0x9c000000, 0x379, 0x8, 0x3, 0x8, 0xffff, 0x2d4c, 0x8, 0x373, 0x100, 0x2, 0x6, 0x2, 0xfffffff7, 0x8001, 0x4, 0x7fffffff, 0x730d9ea1, 0x9, 0x3f, 0x1, 0x8, 0x5, 0x9, 0x9, 0x101, 0x2, 0x40100000, 0x5, 0xd1f5, 0xffffffe1, 0x1, 0x7ff, 0x3, 0x8, 0x5, 0x1eef, 0x3ff, 0x80000000, 0x5e2b9a2a, 0x3, 0x8c20, 0x1, 0x7fffffff, 0x5d6a, 0x5, 0x8, 0x20, 0x3, 0x3f, 0x6]}, 0x45c) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000500)={0x6, 0x5bd7fbe9, 0x5}) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000540)='syz0\x00') 19:39:14 executing program 2: socket$inet(0x2, 0x2, 0x4) 19:39:14 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0xe00, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044891}, 0x800) accept$packet(r0, 0x0, 0x0) 19:39:14 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40805}, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000000)={'syz1\x00', {0x1000, 0x800, 0x308e, 0xb12f}, 0x56, [0xfff, 0x0, 0x0, 0xd90, 0x8, 0x1000, 0x3f, 0xffff, 0x6, 0x81, 0xf2, 0x6, 0xffffffe1, 0x3, 0x10001, 0x0, 0x72, 0x4, 0x6, 0x0, 0x1, 0x1, 0x5, 0x4, 0x7, 0x8000, 0x66b5, 0x5, 0x9, 0x2, 0x7, 0x6, 0xfffffff8, 0x80000001, 0x7f, 0xd51a, 0x3, 0x6, 0x29, 0x200, 0x1, 0x3, 0x6, 0x9, 0x3, 0xe922, 0x3ff, 0x0, 0x5, 0x3, 0xffffffff, 0x80000000, 0x2, 0x3, 0x101, 0x5, 0x5, 0x20, 0x0, 0x7, 0x1, 0x6, 0x800, 0x6], [0x9f1, 0x10001, 0x3, 0x1, 0x401, 0x3, 0x29, 0x1, 0x3, 0x10001, 0x1, 0x3f, 0x56, 0x47b000, 0x6, 0xb7f, 0x7, 0x5c4, 0x1ff, 0xfffffffb, 0x2, 0x826, 0x0, 0xf82c, 0xc1, 0xe35, 0x1ed, 0x5, 0x0, 0x14be, 0x80000000, 0xff, 0x8000, 0x7fff, 0x0, 0x3, 0x3, 0x0, 0x6, 0x6, 0x8001, 0x7, 0x100, 0x10001, 0x7, 0x0, 0x10001, 0x7, 0xee44, 0xfff, 0xa11c, 0x1800, 0x6, 0x0, 0x7fff, 0x3, 0x1e, 0xfff, 0x5, 0x3, 0x8, 0x80000001, 0xa0, 0x7fffffff], [0x3, 0x5, 0x6, 0x20, 0x5, 0xffffffff, 0x40, 0x7fffffff, 0x5, 0xffffffff, 0x0, 0x6, 0xdc7, 0x9, 0x2, 0x1, 0x4, 0xdeb5, 0x8, 0x15, 0x276, 0x1f, 0x8, 0x7f, 0x81, 0x6, 0x5, 0x9ed, 0xca0, 0x7, 0x1ff, 0x4, 0x7fff, 0x418, 0x1000, 0x80000000, 0x0, 0x8001, 0x94, 0x8001, 0x6, 0x8, 0x7fff, 0x10000, 0x9f28, 0x4, 0x200, 0x0, 0x8, 0x6, 0x1, 0x3, 0x1ff, 0x2fb4e827, 0x200, 0x2, 0x3, 0x3b, 0xf543, 0x1, 0x1, 0x6, 0x400, 0x7f], [0xf9f, 0x5, 0x7, 0x81, 0x288, 0x5, 0x4, 0xb, 0x10001, 0xfbd, 0x9, 0x3ff, 0x4, 0x9c000000, 0x379, 0x8, 0x3, 0x8, 0xffff, 0x2d4c, 0x8, 0x373, 0x100, 0x2, 0x6, 0x2, 0xfffffff7, 0x8001, 0x4, 0x7fffffff, 0x730d9ea1, 0x9, 0x3f, 0x1, 0x8, 0x5, 0x9, 0x9, 0x101, 0x2, 0x40100000, 0x5, 0xd1f5, 0xffffffe1, 0x1, 0x7ff, 0x3, 0x8, 0x5, 0x1eef, 0x3ff, 0x80000000, 0x5e2b9a2a, 0x3, 0x8c20, 0x1, 0x7fffffff, 0x5d6a, 0x5, 0x8, 0x20, 0x3, 0x3f, 0x6]}, 0x45c) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) (rerun: 32) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000500)={0x6, 0x5bd7fbe9, 0x5}) (async) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000540)='syz0\x00') 19:39:14 executing program 1: r0 = socket(0x22, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0xe00, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044891}, 0x800) accept$packet(r0, 0x0, 0x0) 19:39:14 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40805}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000000)={'syz1\x00', {0x1000, 0x800, 0x308e, 0xb12f}, 0x56, [0xfff, 0x0, 0x0, 0xd90, 0x8, 0x1000, 0x3f, 0xffff, 0x6, 0x81, 0xf2, 0x6, 0xffffffe1, 0x3, 0x10001, 0x0, 0x72, 0x4, 0x6, 0x0, 0x1, 0x1, 0x5, 0x4, 0x7, 0x8000, 0x66b5, 0x5, 0x9, 0x2, 0x7, 0x6, 0xfffffff8, 0x80000001, 0x7f, 0xd51a, 0x3, 0x6, 0x29, 0x200, 0x1, 0x3, 0x6, 0x9, 0x3, 0xe922, 0x3ff, 0x0, 0x5, 0x3, 0xffffffff, 0x80000000, 0x2, 0x3, 0x101, 0x5, 0x5, 0x20, 0x0, 0x7, 0x1, 0x6, 0x800, 0x6], [0x9f1, 0x10001, 0x3, 0x1, 0x401, 0x3, 0x29, 0x1, 0x3, 0x10001, 0x1, 0x3f, 0x56, 0x47b000, 0x6, 0xb7f, 0x7, 0x5c4, 0x1ff, 0xfffffffb, 0x2, 0x826, 0x0, 0xf82c, 0xc1, 0xe35, 0x1ed, 0x5, 0x0, 0x14be, 0x80000000, 0xff, 0x8000, 0x7fff, 0x0, 0x3, 0x3, 0x0, 0x6, 0x6, 0x8001, 0x7, 0x100, 0x10001, 0x7, 0x0, 0x10001, 0x7, 0xee44, 0xfff, 0xa11c, 0x1800, 0x6, 0x0, 0x7fff, 0x3, 0x1e, 0xfff, 0x5, 0x3, 0x8, 0x80000001, 0xa0, 0x7fffffff], [0x3, 0x5, 0x6, 0x20, 0x5, 0xffffffff, 0x40, 0x7fffffff, 0x5, 0xffffffff, 0x0, 0x6, 0xdc7, 0x9, 0x2, 0x1, 0x4, 0xdeb5, 0x8, 0x15, 0x276, 0x1f, 0x8, 0x7f, 0x81, 0x6, 0x5, 0x9ed, 0xca0, 0x7, 0x1ff, 0x4, 0x7fff, 0x418, 0x1000, 0x80000000, 0x0, 0x8001, 0x94, 0x8001, 0x6, 0x8, 0x7fff, 0x10000, 0x9f28, 0x4, 0x200, 0x0, 0x8, 0x6, 0x1, 0x3, 0x1ff, 0x2fb4e827, 0x200, 0x2, 0x3, 0x3b, 0xf543, 0x1, 0x1, 0x6, 0x400, 0x7f], [0xf9f, 0x5, 0x7, 0x81, 0x288, 0x5, 0x4, 0xb, 0x10001, 0xfbd, 0x9, 0x3ff, 0x4, 0x9c000000, 0x379, 0x8, 0x3, 0x8, 0xffff, 0x2d4c, 0x8, 0x373, 0x100, 0x2, 0x6, 0x2, 0xfffffff7, 0x8001, 0x4, 0x7fffffff, 0x730d9ea1, 0x9, 0x3f, 0x1, 0x8, 0x5, 0x9, 0x9, 0x101, 0x2, 0x40100000, 0x5, 0xd1f5, 0xffffffe1, 0x1, 0x7ff, 0x3, 0x8, 0x5, 0x1eef, 0x3ff, 0x80000000, 0x5e2b9a2a, 0x3, 0x8c20, 0x1, 0x7fffffff, 0x5d6a, 0x5, 0x8, 0x20, 0x3, 0x3f, 0x6]}, 0x45c) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000500)={0x6, 0x5bd7fbe9, 0x5}) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000540)='syz0\x00') socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40805}, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000000)={'syz1\x00', {0x1000, 0x800, 0x308e, 0xb12f}, 0x56, [0xfff, 0x0, 0x0, 0xd90, 0x8, 0x1000, 0x3f, 0xffff, 0x6, 0x81, 0xf2, 0x6, 0xffffffe1, 0x3, 0x10001, 0x0, 0x72, 0x4, 0x6, 0x0, 0x1, 0x1, 0x5, 0x4, 0x7, 0x8000, 0x66b5, 0x5, 0x9, 0x2, 0x7, 0x6, 0xfffffff8, 0x80000001, 0x7f, 0xd51a, 0x3, 0x6, 0x29, 0x200, 0x1, 0x3, 0x6, 0x9, 0x3, 0xe922, 0x3ff, 0x0, 0x5, 0x3, 0xffffffff, 0x80000000, 0x2, 0x3, 0x101, 0x5, 0x5, 0x20, 0x0, 0x7, 0x1, 0x6, 0x800, 0x6], [0x9f1, 0x10001, 0x3, 0x1, 0x401, 0x3, 0x29, 0x1, 0x3, 0x10001, 0x1, 0x3f, 0x56, 0x47b000, 0x6, 0xb7f, 0x7, 0x5c4, 0x1ff, 0xfffffffb, 0x2, 0x826, 0x0, 0xf82c, 0xc1, 0xe35, 0x1ed, 0x5, 0x0, 0x14be, 0x80000000, 0xff, 0x8000, 0x7fff, 0x0, 0x3, 0x3, 0x0, 0x6, 0x6, 0x8001, 0x7, 0x100, 0x10001, 0x7, 0x0, 0x10001, 0x7, 0xee44, 0xfff, 0xa11c, 0x1800, 0x6, 0x0, 0x7fff, 0x3, 0x1e, 0xfff, 0x5, 0x3, 0x8, 0x80000001, 0xa0, 0x7fffffff], [0x3, 0x5, 0x6, 0x20, 0x5, 0xffffffff, 0x40, 0x7fffffff, 0x5, 0xffffffff, 0x0, 0x6, 0xdc7, 0x9, 0x2, 0x1, 0x4, 0xdeb5, 0x8, 0x15, 0x276, 0x1f, 0x8, 0x7f, 0x81, 0x6, 0x5, 0x9ed, 0xca0, 0x7, 0x1ff, 0x4, 0x7fff, 0x418, 0x1000, 0x80000000, 0x0, 0x8001, 0x94, 0x8001, 0x6, 0x8, 0x7fff, 0x10000, 0x9f28, 0x4, 0x200, 0x0, 0x8, 0x6, 0x1, 0x3, 0x1ff, 0x2fb4e827, 0x200, 0x2, 0x3, 0x3b, 0xf543, 0x1, 0x1, 0x6, 0x400, 0x7f], [0xf9f, 0x5, 0x7, 0x81, 0x288, 0x5, 0x4, 0xb, 0x10001, 0xfbd, 0x9, 0x3ff, 0x4, 0x9c000000, 0x379, 0x8, 0x3, 0x8, 0xffff, 0x2d4c, 0x8, 0x373, 0x100, 0x2, 0x6, 0x2, 0xfffffff7, 0x8001, 0x4, 0x7fffffff, 0x730d9ea1, 0x9, 0x3f, 0x1, 0x8, 0x5, 0x9, 0x9, 0x101, 0x2, 0x40100000, 0x5, 0xd1f5, 0xffffffe1, 0x1, 0x7ff, 0x3, 0x8, 0x5, 0x1eef, 0x3ff, 0x80000000, 0x5e2b9a2a, 0x3, 0x8c20, 0x1, 0x7fffffff, 0x5d6a, 0x5, 0x8, 0x20, 0x3, 0x3f, 0x6]}, 0x45c) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) (async) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000500)={0x6, 0x5bd7fbe9, 0x5}) (async) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000540)='syz0\x00') (async) 19:39:14 executing program 2: socket$inet(0x2, 0x2, 0x4) socket$inet(0x2, 0x2, 0x4) (async) 19:39:14 executing program 1: r0 = socket(0x22, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0xe00, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044891}, 0x800) accept$packet(r0, 0x0, 0x0) 19:39:14 executing program 4: socket(0x25, 0x5, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/56, 0x38) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 19:39:14 executing program 1: r0 = socket(0x21, 0x4, 0x0) accept$packet(r0, 0x0, 0x0) 19:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x78}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40094}, 0x4) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0xfffffe1d) 19:39:14 executing program 2: socket$inet(0x2, 0x2, 0x4) socket$inet(0x2, 0x2, 0x4) (async) 19:39:14 executing program 1: r0 = socket(0x21, 0x4, 0x0) accept$packet(r0, 0x0, 0x0) socket(0x21, 0x4, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:14 executing program 4: socket(0x25, 0x5, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/56, 0x38) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket(0x25, 0x5, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/56, 0x38) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) sendmsg$rds(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) 19:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x78}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40094}, 0x4) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0xfffffe1d) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x78}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40094}, 0x4) (async) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) (async) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0xfffffe1d) (async) 19:39:14 executing program 4: socket(0x25, 0x5, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/56, 0x38) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) sendmsg$rds(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 19:39:14 executing program 1: r0 = socket(0x21, 0x4, 0x0) accept$packet(r0, 0x0, 0x0) socket(0x21, 0x4, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x78}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40094}, 0x4) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) (async) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0xfffffe1d) 19:39:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf0, 0x0, &(0x7f0000000440)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x1, 0x14}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x3e}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/222, 0xde, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000400)={0x0, 0x28, 0x48}}, 0x400}], 0x24, 0x0, &(0x7f0000000540)="75ec83db6370df05125103c76d21a842dd9d191e1e9a06dec875a61f2feebd5679537323"}) 19:39:15 executing program 2: r0 = socket(0x1, 0x6, 0x6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}}, 0x40000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socket$inet(0x2, 0x2, 0x1) 19:39:15 executing program 4: socket(0x25, 0x5, 0x0) socket(0x8, 0x80000, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 19:39:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x2, 0x5}}, 0x20) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:39:15 executing program 2: r0 = socket(0x1, 0x6, 0x6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}}, 0x40000) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) (rerun: 32) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) socket$inet(0x2, 0x2, 0x1) 19:39:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) (async) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf0, 0x0, &(0x7f0000000440)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x1, 0x14}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x3e}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/222, 0xde, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000400)={0x0, 0x28, 0x48}}, 0x400}], 0x24, 0x0, &(0x7f0000000540)="75ec83db6370df05125103c76d21a842dd9d191e1e9a06dec875a61f2feebd5679537323"}) 19:39:15 executing program 4: socket(0x25, 0x5, 0x0) socket(0x8, 0x80000, 0x6) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 19:39:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) (async, rerun: 32) r1 = socket(0x22, 0x3, 0x0) (rerun: 32) accept$packet(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf0, 0x0, &(0x7f0000000440)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x1, 0x14}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x3e}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/222, 0xde, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000400)={0x0, 0x28, 0x48}}, 0x400}], 0x24, 0x0, &(0x7f0000000540)="75ec83db6370df05125103c76d21a842dd9d191e1e9a06dec875a61f2feebd5679537323"}) 19:39:15 executing program 4: socket(0x25, 0x5, 0x0) socket(0x8, 0x80000, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) socket(0x25, 0x5, 0x0) (async) socket(0x8, 0x80000, 0x6) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getpeername$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) 19:39:15 executing program 2: r0 = socket(0x1, 0x6, 0x6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}}, 0x40000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) socket$inet(0x2, 0x2, 0x1) 19:39:15 executing program 1: socket(0x22, 0x1, 0x0) socketpair(0x5, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) accept$packet(r1, 0x0, 0x0) 19:39:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf0, 0x0, &(0x7f0000000440)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x1, 0x14}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x3e}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/222, 0xde, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000400)={0x0, 0x28, 0x48}}, 0x400}], 0x24, 0x0, &(0x7f0000000540)="75ec83db6370df05125103c76d21a842dd9d191e1e9a06dec875a61f2feebd5679537323"}) 19:39:15 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) socket$rds(0x15, 0x5, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r2 = socket$inet(0x2, 0x2, 0x5) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) 19:39:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20) socket$inet(0x2, 0x5, 0x3bf) 19:39:15 executing program 4: prctl$PR_SVE_SET_VL(0x32, 0x1b983) r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x2, 0x5}}, 0x20) (async) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:39:15 executing program 1: socket(0x22, 0x1, 0x0) socketpair(0x5, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) accept$packet(r1, 0x0, 0x0) socket(0x22, 0x1, 0x0) (async) socketpair(0x5, 0x3, 0x8, &(0x7f0000000000)) (async) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) (async) accept$packet(r1, 0x0, 0x0) (async) 19:39:15 executing program 5: r0 = socket(0x25, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 19:39:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20) socket$inet(0x2, 0x5, 0x3bf) 19:39:15 executing program 4: prctl$PR_SVE_SET_VL(0x32, 0x1b983) (async, rerun: 32) r0 = socket(0x25, 0x5, 0x0) (rerun: 32) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:15 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) socket$rds(0x15, 0x5, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r2 = socket$inet(0x2, 0x2, 0x5) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) 19:39:15 executing program 5: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0xa}}, 0x20) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:16 executing program 4: prctl$PR_SVE_SET_VL(0x32, 0x1b983) (async, rerun: 64) r0 = socket(0x25, 0x5, 0x0) (rerun: 64) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:16 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) socket$rds(0x15, 0x5, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r2 = socket$inet(0x2, 0x2, 0x5) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) 19:39:16 executing program 1: socket(0x22, 0x1, 0x0) (async) socketpair(0x5, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) accept$packet(r1, 0x0, 0x0) 19:39:16 executing program 5: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0xa}}, 0x20) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20) (async) socket$inet(0x2, 0x5, 0x3bf) 19:39:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x2, 0x5}}, 0x20) (async) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:39:16 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x3, 0x4, 0x9}, {0x9, 0x3, 0x1f, 0x40}, {0x8000, 0x15, 0x6, 0x2}]}, 0x10) socketpair(0x11, 0x3, 0x9, &(0x7f0000000000)) 19:39:16 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x20) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = socket(0x2a, 0x1, 0xfffffffe) sendmsg$rds(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000) 19:39:16 executing program 5: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0xa}}, 0x20) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:16 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) socket$rds(0x15, 0x5, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r2 = socket$inet(0x2, 0x2, 0x5) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:16 executing program 2: socket$inet(0x2, 0x3, 0x4) 19:39:16 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) (async, rerun: 64) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x3, 0x4, 0x9}, {0x9, 0x3, 0x1f, 0x40}, {0x8000, 0x15, 0x6, 0x2}]}, 0x10) (async, rerun: 64) socketpair(0x11, 0x3, 0x9, &(0x7f0000000000)) 19:39:16 executing program 4: r0 = socket(0x25, 0x5, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x20) (async) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) r3 = socket(0x2a, 0x1, 0xfffffffe) sendmsg$rds(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000) 19:39:16 executing program 2: socket$inet(0x2, 0x3, 0x4) socket$inet(0x2, 0x3, 0x4) (async) 19:39:16 executing program 5: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:16 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x20) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = socket(0x2a, 0x1, 0xfffffffe) sendmsg$rds(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000) socket(0x25, 0x5, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x20) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) socket(0x2a, 0x1, 0xfffffffe) (async) sendmsg$rds(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000) (async) 19:39:16 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x3, 0x4, 0x9}, {0x9, 0x3, 0x1f, 0x40}, {0x8000, 0x15, 0x6, 0x2}]}, 0x10) (async) socketpair(0x11, 0x3, 0x9, &(0x7f0000000000)) 19:39:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="1da4ffc223aead6897da6544650fce9cef87b97b98389ec96e5c79", 0x1b, 0x4004000, &(0x7f0000000140)={0x11, 0xf5, r2, 0x1, 0x8, 0x6, @remote}, 0x14) 19:39:16 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) socket$rds(0x15, 0x5, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r2 = socket$inet(0x2, 0x2, 0x5) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:16 executing program 2: socket$inet(0x2, 0x3, 0x4) 19:39:16 executing program 5: r0 = socket(0x25, 0x5, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:16 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x8}, 0x20) r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0xb1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff, 0x2}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) recvfrom$l2tp6(r2, &(0x7f0000000180)=""/95, 0x5f, 0x40000001, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, 0x20) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000140)=0x3ff, 0x4) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @random="cc2caa4feb71"}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0xff, @broadcast, 0x4e22, 0x0, 'lblc\x00', 0x28, 0x0, 0x11}, 0x2c) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) write$apparmor_exec(r5, &(0x7f0000000280)={'exec ', '\x00'}, 0x6) 19:39:16 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x20000080) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x91, 0x0, &(0x7f0000000080)="176c43b19177bc55776b4322175f057505a6730f056dea200c6096a7cd552b372673b270dc9a9018578efde80cc07861d4542ca102e5b798214fdc9d3be2d7ac45a701d0a1df4df546d54b421380980a71d7226c8c832a26dc09ca28119f709b9274d93e39ba7040699e8d9a3a8ac33a40a775e5bdcc9f28c8e0eca3394cc9e777174ef8adb86d858e95d71340e48d2b34"}) 19:39:17 executing program 5: recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:17 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x20000080) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x91, 0x0, &(0x7f0000000080)="176c43b19177bc55776b4322175f057505a6730f056dea200c6096a7cd552b372673b270dc9a9018578efde80cc07861d4542ca102e5b798214fdc9d3be2d7ac45a701d0a1df4df546d54b421380980a71d7226c8c832a26dc09ca28119f709b9274d93e39ba7040699e8d9a3a8ac33a40a775e5bdcc9f28c8e0eca3394cc9e777174ef8adb86d858e95d71340e48d2b34"}) 19:39:17 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000000)=0x7, 0x4) socket$inet(0x2, 0x2, 0x1) 19:39:17 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) socket$rds(0x15, 0x5, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:17 executing program 3: r0 = socket(0x25, 0x6, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x10008000) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x80000000, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x8001, [0x0, 0x7fff], 0x8}, 0x10) 19:39:17 executing program 5: recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:17 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x8}, 0x20) r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0xb1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff, 0x2}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) recvfrom$l2tp6(r2, &(0x7f0000000180)=""/95, 0x5f, 0x40000001, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, 0x20) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000140)=0x3ff, 0x4) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @random="cc2caa4feb71"}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0xff, @broadcast, 0x4e22, 0x0, 'lblc\x00', 0x28, 0x0, 0x11}, 0x2c) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) write$apparmor_exec(r5, &(0x7f0000000280)={'exec ', '\x00'}, 0x6) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x8}, 0x20) (async) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0xb1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff, 0x2}, 0x20) (async) socket$packet(0x11, 0x3, 0x300) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) recvfrom$l2tp6(r2, &(0x7f0000000180)=""/95, 0x5f, 0x40000001, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, 0x20) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) (async) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000140)=0x3ff, 0x4) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @random="cc2caa4feb71"}, 0x10) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0xff, @broadcast, 0x4e22, 0x0, 'lblc\x00', 0x28, 0x0, 0x11}, 0x2c) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) (async) write$apparmor_exec(r5, &(0x7f0000000280)={'exec ', '\x00'}, 0x6) (async) 19:39:17 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x20000080) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x91, 0x0, &(0x7f0000000080)="176c43b19177bc55776b4322175f057505a6730f056dea200c6096a7cd552b372673b270dc9a9018578efde80cc07861d4542ca102e5b798214fdc9d3be2d7ac45a701d0a1df4df546d54b421380980a71d7226c8c832a26dc09ca28119f709b9274d93e39ba7040699e8d9a3a8ac33a40a775e5bdcc9f28c8e0eca3394cc9e777174ef8adb86d858e95d71340e48d2b34"}) 19:39:17 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000000)=0x7, 0x4) socket$inet(0x2, 0x2, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000000)=0x7, 0x4) (async) socket$inet(0x2, 0x2, 0x1) (async) 19:39:17 executing program 3: r0 = socket(0x25, 0x6, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x10008000) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x80000000, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x8001, [0x0, 0x7fff], 0x8}, 0x10) 19:39:17 executing program 5: recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:17 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) socket$rds(0x15, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:17 executing program 3: r0 = socket(0x25, 0x6, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x10008000) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x80000000, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x8001, [0x0, 0x7fff], 0x8}, 0x10) 19:39:17 executing program 5: r0 = socket(0x0, 0x5, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:17 executing program 4: r0 = socket(0x1, 0x4, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:17 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000000)=0x7, 0x4) (async) socket$inet(0x2, 0x2, 0x1) 19:39:17 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:17 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x8}, 0x20) (async) r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0xb1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff, 0x2}, 0x20) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async, rerun: 64) recvfrom$l2tp6(r2, &(0x7f0000000180)=""/95, 0x5f, 0x40000001, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, 0x20) (async, rerun: 64) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000140)=0x3ff, 0x4) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @random="cc2caa4feb71"}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0xff, @broadcast, 0x4e22, 0x0, 'lblc\x00', 0x28, 0x0, 0x11}, 0x2c) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) write$apparmor_exec(r5, &(0x7f0000000280)={'exec ', '\x00'}, 0x6) 19:39:17 executing program 3: r0 = socket(0x25, 0x6, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x10008000) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x80000000, 0x4) 19:39:17 executing program 2: socket$inet(0x2, 0xa, 0x8) 19:39:17 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:17 executing program 4: r0 = socket(0x1, 0x4, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:17 executing program 3: r0 = socket(0x25, 0x6, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x10008000) 19:39:17 executing program 5: r0 = socket(0x0, 0x5, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:17 executing program 2: socket$inet(0x2, 0xa, 0x8) 19:39:17 executing program 3: socket(0x25, 0x6, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") 19:39:17 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:17 executing program 1: r0 = socket(0x22, 0x3, 0x5) sendmsg$rds(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/196, 0xc4}, {&(0x7f0000000100)=""/225, 0xe1}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000480)=""/63, 0x3f}, {&(0x7f00000004c0)=""/248, 0xf8}], 0x8, &(0x7f0000000840)=[@rdma_args={0x48, 0x114, 0x1, {{0x80000001, 0x40}, {&(0x7f0000000640)=""/88, 0x58}, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/145, 0x91}], 0x2, 0x8, 0x7}}], 0x48, 0x8040}, 0x2000800) socketpair(0x15, 0x6, 0x2, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00'}) accept$packet(r0, 0x0, 0x0) 19:39:17 executing program 4: r0 = socket(0x1, 0x4, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:17 executing program 2: socket$inet(0x2, 0xa, 0x8) 19:39:17 executing program 5: r0 = socket(0x0, 0x5, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:17 executing program 3: socket(0x25, 0x6, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") 19:39:17 executing program 1: r0 = socket(0x22, 0x3, 0x5) sendmsg$rds(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/196, 0xc4}, {&(0x7f0000000100)=""/225, 0xe1}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000480)=""/63, 0x3f}, {&(0x7f00000004c0)=""/248, 0xf8}], 0x8, &(0x7f0000000840)=[@rdma_args={0x48, 0x114, 0x1, {{0x80000001, 0x40}, {&(0x7f0000000640)=""/88, 0x58}, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/145, 0x91}], 0x2, 0x8, 0x7}}], 0x48, 0x8040}, 0x2000800) socketpair(0x15, 0x6, 0x2, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00'}) accept$packet(r0, 0x0, 0x0) 19:39:17 executing program 4: socket(0x25, 0x5, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000c0}, 0x0) 19:39:17 executing program 2: socket$inet(0x2, 0x0, 0xd566) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getpeername$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5440000000000000}]}, 0x28}}, 0x24040000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) 19:39:17 executing program 4: socket(0x25, 0x5, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000c0}, 0x0) 19:39:17 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:17 executing program 2: socket$inet(0x2, 0x0, 0xd566) (async) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getpeername$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5440000000000000}]}, 0x28}}, 0x24040000) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) 19:39:17 executing program 5: r0 = socket(0x25, 0x0, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:17 executing program 3: socket(0x25, 0x6, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") 19:39:17 executing program 4: socket(0x25, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000c0}, 0x0) 19:39:17 executing program 1: r0 = socket(0x22, 0x3, 0x5) sendmsg$rds(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/196, 0xc4}, {&(0x7f0000000100)=""/225, 0xe1}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000480)=""/63, 0x3f}, {&(0x7f00000004c0)=""/248, 0xf8}], 0x8, &(0x7f0000000840)=[@rdma_args={0x48, 0x114, 0x1, {{0x80000001, 0x40}, {&(0x7f0000000640)=""/88, 0x58}, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/145, 0x91}], 0x2, 0x8, 0x7}}], 0x48, 0x8040}, 0x2000800) socketpair(0x15, 0x6, 0x2, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00'}) accept$packet(r0, 0x0, 0x0) socket(0x22, 0x3, 0x5) (async) sendmsg$rds(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/196, 0xc4}, {&(0x7f0000000100)=""/225, 0xe1}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000480)=""/63, 0x3f}, {&(0x7f00000004c0)=""/248, 0xf8}], 0x8, &(0x7f0000000840)=[@rdma_args={0x48, 0x114, 0x1, {{0x80000001, 0x40}, {&(0x7f0000000640)=""/88, 0x58}, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/145, 0x91}], 0x2, 0x8, 0x7}}], 0x48, 0x8040}, 0x2000800) (async) socketpair(0x15, 0x6, 0x2, &(0x7f0000000900)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00'}) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:17 executing program 0: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:17 executing program 2: socket$inet(0x2, 0x0, 0xd566) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getpeername$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5440000000000000}]}, 0x28}}, 0x24040000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) socket$inet(0x2, 0x0, 0xd566) (async) pipe2$watch_queue(&(0x7f0000000200), 0x80) (async) getpeername$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5440000000000000}]}, 0x28}}, 0x24040000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async) 19:39:17 executing program 5: r0 = socket(0x25, 0x0, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:17 executing program 3: socket(0x25, 0x6, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") 19:39:17 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = getpgrp(0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000140)) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000000)=""/194, &(0x7f0000000100)=0xc2) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:17 executing program 0: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:17 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) 19:39:17 executing program 5: r0 = socket(0x25, 0x0, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:17 executing program 2: socket$inet(0x2, 0x2, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="c45e097fded63dbfd43b95ee05c2cbd7905953e100da82e116547554cfe7052fcf4d7c177a149c6880d64c8bd8ba7631f8ea6bc4b2176d2b18d36078087c1163eddace15f0034f7b07505d40", 0x4c, 0x20000840, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) socketpair(0x28, 0x6, 0x200, &(0x7f0000000000)) 19:39:17 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = getpgrp(0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000140)) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000000)=""/194, &(0x7f0000000100)=0xc2) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x25, 0x5, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) getpgrp(0xffffffffffffffff) (async) sched_getaffinity(r2, 0x8, &(0x7f0000000140)) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000000)=""/194, &(0x7f0000000100)=0xc2) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) 19:39:17 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) 19:39:17 executing program 0: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:17 executing program 2: socket$inet(0x2, 0x2, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="c45e097fded63dbfd43b95ee05c2cbd7905953e100da82e116547554cfe7052fcf4d7c177a149c6880d64c8bd8ba7631f8ea6bc4b2176d2b18d36078087c1163eddace15f0034f7b07505d40", 0x4c, 0x20000840, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) socketpair(0x28, 0x6, 0x200, &(0x7f0000000000)) 19:39:17 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") 19:39:17 executing program 0: r0 = socket(0x0, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:17 executing program 5: socket(0x25, 0x5, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:17 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = getpgrp(0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000140)) (async, rerun: 64) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (rerun: 64) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000000)=""/194, &(0x7f0000000100)=0xc2) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:17 executing program 2: socket$inet(0x2, 0x2, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="c45e097fded63dbfd43b95ee05c2cbd7905953e100da82e116547554cfe7052fcf4d7c177a149c6880d64c8bd8ba7631f8ea6bc4b2176d2b18d36078087c1163eddace15f0034f7b07505d40", 0x4c, 0x20000840, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) socketpair(0x28, 0x6, 0x200, &(0x7f0000000000)) socket$inet(0x2, 0x2, 0x1) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="c45e097fded63dbfd43b95ee05c2cbd7905953e100da82e116547554cfe7052fcf4d7c177a149c6880d64c8bd8ba7631f8ea6bc4b2176d2b18d36078087c1163eddace15f0034f7b07505d40", 0x4c, 0x20000840, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) socketpair(0x28, 0x6, 0x200, &(0x7f0000000000)) (async) 19:39:17 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") 19:39:17 executing program 1: r0 = socket(0x1f, 0x4, 0x43) accept$packet(r0, 0x0, 0x0) 19:39:17 executing program 0: r0 = socket(0x0, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:17 executing program 5: socket(0x25, 0x5, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:17 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getpeername$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket(0x23, 0x1, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000040)={0x10, 0x28b8, {0x51, 0x9, 0xfff, {0x59, 0xfff8}, {0xfffc, 0x5}, @period={0x59, 0x7, 0x3, 0x10, 0x4, {0x5, 0xaa, 0x7f, 0x6}, 0xa, &(0x7f0000000000)=[0x0, 0x5, 0x7, 0xb3c0, 0x1f, 0x8, 0x7, 0xdfda, 0x1f, 0x71d3]}}, {0x54, 0x1d9f, 0x2, {0x3}, {0x4, 0x5}, @ramp={0x9, 0x101, {0x5, 0x9, 0x6, 0x101}}}}) 19:39:17 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") 19:39:17 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x8, 0x149202) 19:39:17 executing program 1: r0 = socket(0x1f, 0x4, 0x43) accept$packet(r0, 0x0, 0x0) socket(0x1f, 0x4, 0x43) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:17 executing program 5: socket(0x25, 0x5, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0x13, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:17 executing program 0: r0 = socket(0x0, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:17 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) getpeername$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket(0x23, 0x1, 0x4) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) (rerun: 64) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000040)={0x10, 0x28b8, {0x51, 0x9, 0xfff, {0x59, 0xfff8}, {0xfffc, 0x5}, @period={0x59, 0x7, 0x3, 0x10, 0x4, {0x5, 0xaa, 0x7f, 0x6}, 0xa, &(0x7f0000000000)=[0x0, 0x5, 0x7, 0xb3c0, 0x1f, 0x8, 0x7, 0xdfda, 0x1f, 0x71d3]}}, {0x54, 0x1d9f, 0x2, {0x3}, {0x4, 0x5}, @ramp={0x9, 0x101, {0x5, 0x9, 0x6, 0x101}}}}) 19:39:18 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") 19:39:18 executing program 5: r0 = socket(0x25, 0x5, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:18 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$media(&(0x7f0000000000), 0x8, 0x149202) 19:39:18 executing program 1: r0 = socket(0x1f, 0x4, 0x43) accept$packet(r0, 0x0, 0x0) 19:39:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") 19:39:18 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 19:39:18 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x8, 0x149202) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$media(&(0x7f0000000000), 0x8, 0x149202) (async) 19:39:18 executing program 0: r0 = socket(0x25, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:18 executing program 5: r0 = socket(0x25, 0x5, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:18 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 19:39:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") 19:39:18 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) getpeername$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket(0x23, 0x1, 0x4) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) (async) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000040)={0x10, 0x28b8, {0x51, 0x9, 0xfff, {0x59, 0xfff8}, {0xfffc, 0x5}, @period={0x59, 0x7, 0x3, 0x10, 0x4, {0x5, 0xaa, 0x7f, 0x6}, 0xa, &(0x7f0000000000)=[0x0, 0x5, 0x7, 0xb3c0, 0x1f, 0x8, 0x7, 0xdfda, 0x1f, 0x71d3]}}, {0x54, 0x1d9f, 0x2, {0x3}, {0x4, 0x5}, @ramp={0x9, 0x101, {0x5, 0x9, 0x6, 0x101}}}}) 19:39:18 executing program 5: r0 = socket(0x25, 0x5, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:39:18 executing program 2: socket$inet(0x2, 0x2, 0xfffffffc) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000080)={{r1, r2/1000+10000}, 0x12, 0x0, 0x3}, 0x18) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x10) 19:39:18 executing program 0: r0 = socket(0x25, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc8bc799fe9ebb8a3e6dd7241cf468a5d45c631bbe13622cd23f32f7095017ebb8762dd98d4205e04cf53c9312bf30b0d83b7419") 19:39:18 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 19:39:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 19:39:18 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x49df}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}]}, 0x48}}, 0x24004051) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x400c080) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x24084001) 19:39:18 executing program 5: r0 = socket(0x25, 0x5, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20) 19:39:18 executing program 0: r0 = socket(0x25, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:18 executing program 2: socket$inet(0x2, 0x2, 0xfffffffc) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000080)={{r1, r2/1000+10000}, 0x12, 0x0, 0x3}, 0x18) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x10) 19:39:18 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x49df}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}]}, 0x48}}, 0x24004051) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x400c080) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x24084001) socket(0x25, 0x5, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x49df}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}]}, 0x48}}, 0x24004051) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x400c080) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x24084001) (async) 19:39:18 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x2, 0x3}}, 0x20) 19:39:18 executing program 2: socket$inet(0x2, 0x2, 0xfffffffc) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000080)={{r1, r2/1000+10000}, 0x12, 0x0, 0x3}, 0x18) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x10) 19:39:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r4, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000000c0)="ab20dc784828b82c1f140f45f9c771ddb62d5f49a58d602e1baa16c01385080bd85f2fe901724b0e62b45d93c8c75b24d78edf3dbf30ed5858a91cbab9b783dd47fba2c526815dc3e64377947950d6b72f80b32c0aa9de95a8be0017df32669f1f904c55a71d5f708a7457e5a1d46a2ca78973400958", 0x76) r5 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) socketpair(0x2c, 0x4, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) accept4$packet(r5, 0x0, 0x0, 0x0) getpeername$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 19:39:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 19:39:18 executing program 0: socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:18 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x2, 0x3}}, 0x20) 19:39:18 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x49df}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}]}, 0x48}}, 0x24004051) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x400c080) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x24084001) socket(0x25, 0x5, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x49df}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}]}, 0x48}}, 0x24004051) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x400c080) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x24084001) (async) 19:39:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 19:39:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40042) 19:39:18 executing program 0: socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:18 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x2, 0x3}}, 0x20) 19:39:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:18 executing program 0: socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:18 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x3, 0x3, 0x38, 0x2, 0x8001, 0x9, 0xec}, 0x1c) socket(0x21, 0x1, 0x2) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r4, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000000c0)="ab20dc784828b82c1f140f45f9c771ddb62d5f49a58d602e1baa16c01385080bd85f2fe901724b0e62b45d93c8c75b24d78edf3dbf30ed5858a91cbab9b783dd47fba2c526815dc3e64377947950d6b72f80b32c0aa9de95a8be0017df32669f1f904c55a71d5f708a7457e5a1d46a2ca78973400958", 0x76) r5 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) socketpair(0x2c, 0x4, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) accept4$packet(r5, 0x0, 0x0, 0x0) getpeername$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 19:39:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40042) 19:39:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:18 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x4) sendto$packet(r3, &(0x7f0000000000)="8a99d5d709cce709d847232592ed325e1b15772cb40d31750ecc27dd5215eea68e151734d021e54910af160e5d8e7d6282207e834572783adfd0ff49fe88a94662613e420cb56a0c4a4d40e0a138c1cf66d7458ea76b2ba128467db6ca0ca3add1846e643ea28c0d610444ed8a8b8ba11fa1a86b11e4685208a65e75a84cdae219e7bbb08a2ec7ade19e657ecf8b951e35867ed4e58cc7372e2e0b871b783d6e61a5c37573392edaf9a9fb74080d00bc4e073efeee152e4049d7c7cae88fb99b6e9d4f71eea00fea336cb3a17cb1fea125693dd31c4bea1c538023110c805f8b45d85e", 0xe3, 0x44801, &(0x7f0000000380)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @random="ba7f748c5b6e"}, 0x14) r5 = accept4$packet(r2, 0x0, &(0x7f0000000240), 0x800) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r9, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r4, 0x2f, 0x80, 0x3f, 0x7, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x7800, 0x10, 0x25, 0x7}}) recvfrom$packet(r9, &(0x7f0000000480)=""/107, 0x6b, 0x3, &(0x7f00000005c0)={0x11, 0x1b, r10, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c040021", @ANYRES16=r11, @ANYBLOB="00022bbd7000fbdbdf25030000000500370001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000000) sendto$packet(r5, &(0x7f0000000280)="fff5d26f7caf853bbc00b410741a37ca91c6065e506a7b5ce5deb4f0255b9bf272355743f917ba9fccd149142ffaa80a8ebdad817d48efcdf823773c7744fe80df3ca6462e4d3541c60b5838eb9b04a0a4ba2275f7a5a9ae424ec036b5ee9fb907eace1e973938623c678b98b5fe5f5e977a5e7f7d03476999291d7e16032d63474f750ed530e3f91f3f122e84a19dea2600d35ad71f2c99a430e7cdfbf48ece70716913e4a92819907e22f1b7db43a044f1b233", 0xb4, 0x2004c894, &(0x7f0000000340)={0x11, 0x8, r7, 0x1, 0x7, 0x6, @broadcast}, 0x14) 19:39:18 executing program 4: r0 = socket(0x25, 0x5, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x3, 0x3, 0x38, 0x2, 0x8001, 0x9, 0xec}, 0x1c) socket(0x21, 0x1, 0x2) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:18 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x516cdd6e5c4cfae9) 19:39:18 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x3, 0x3, 0x38, 0x2, 0x8001, 0x9, 0xec}, 0x1c) (async) socket(0x21, 0x1, 0x2) (async, rerun: 64) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) 19:39:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40042) 19:39:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:19 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x516cdd6e5c4cfae9) 19:39:19 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) (async) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) (async) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x4) sendto$packet(r3, &(0x7f0000000000)="8a99d5d709cce709d847232592ed325e1b15772cb40d31750ecc27dd5215eea68e151734d021e54910af160e5d8e7d6282207e834572783adfd0ff49fe88a94662613e420cb56a0c4a4d40e0a138c1cf66d7458ea76b2ba128467db6ca0ca3add1846e643ea28c0d610444ed8a8b8ba11fa1a86b11e4685208a65e75a84cdae219e7bbb08a2ec7ade19e657ecf8b951e35867ed4e58cc7372e2e0b871b783d6e61a5c37573392edaf9a9fb74080d00bc4e073efeee152e4049d7c7cae88fb99b6e9d4f71eea00fea336cb3a17cb1fea125693dd31c4bea1c538023110c805f8b45d85e", 0xe3, 0x44801, &(0x7f0000000380)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @random="ba7f748c5b6e"}, 0x14) (async) r5 = accept4$packet(r2, 0x0, &(0x7f0000000240), 0x800) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) getpeername$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) (async, rerun: 32) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 32) r9 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r9, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r4, 0x2f, 0x80, 0x3f, 0x7, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x7800, 0x10, 0x25, 0x7}}) recvfrom$packet(r9, &(0x7f0000000480)=""/107, 0x6b, 0x3, &(0x7f00000005c0)={0x11, 0x1b, r10, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c040021", @ANYRES16=r11, @ANYBLOB="00022bbd7000fbdbdf25030000000500370001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000000) sendto$packet(r5, &(0x7f0000000280)="fff5d26f7caf853bbc00b410741a37ca91c6065e506a7b5ce5deb4f0255b9bf272355743f917ba9fccd149142ffaa80a8ebdad817d48efcdf823773c7744fe80df3ca6462e4d3541c60b5838eb9b04a0a4ba2275f7a5a9ae424ec036b5ee9fb907eace1e973938623c678b98b5fe5f5e977a5e7f7d03476999291d7e16032d63474f750ed530e3f91f3f122e84a19dea2600d35ad71f2c99a430e7cdfbf48ece70716913e4a92819907e22f1b7db43a044f1b233", 0xb4, 0x2004c894, &(0x7f0000000340)={0x11, 0x8, r7, 0x1, 0x7, 0x6, @broadcast}, 0x14) 19:39:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5fc361f4fca0b0e2ff34ac73e9be5b50df02a6623c2ac026bacc") 19:39:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r4, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000000c0)="ab20dc784828b82c1f140f45f9c771ddb62d5f49a58d602e1baa16c01385080bd85f2fe901724b0e62b45d93c8c75b24d78edf3dbf30ed5858a91cbab9b783dd47fba2c526815dc3e64377947950d6b72f80b32c0aa9de95a8be0017df32669f1f904c55a71d5f708a7457e5a1d46a2ca78973400958", 0x76) r5 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) socketpair(0x2c, 0x4, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) accept4$packet(r5, 0x0, 0x0, 0x0) getpeername$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 19:39:19 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x516cdd6e5c4cfae9) 19:39:19 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) 19:39:19 executing program 2: r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket(0x3, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xc0, 0x5, 0x21, @dev={0xfe, 0x80, '\x00', 0xb}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1, 0xf887, 0x3, 0x2}}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x3a, @broadcast, 0x4e20, 0x200, 'sed\x00', 0x20, 0x1f, 0x20}, 0x2c) getpeername$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x20) 19:39:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:19 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) socket$bt_bnep(0x1f, 0x3, 0x4) 19:39:19 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:19 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x4) sendto$packet(r3, &(0x7f0000000000)="8a99d5d709cce709d847232592ed325e1b15772cb40d31750ecc27dd5215eea68e151734d021e54910af160e5d8e7d6282207e834572783adfd0ff49fe88a94662613e420cb56a0c4a4d40e0a138c1cf66d7458ea76b2ba128467db6ca0ca3add1846e643ea28c0d610444ed8a8b8ba11fa1a86b11e4685208a65e75a84cdae219e7bbb08a2ec7ade19e657ecf8b951e35867ed4e58cc7372e2e0b871b783d6e61a5c37573392edaf9a9fb74080d00bc4e073efeee152e4049d7c7cae88fb99b6e9d4f71eea00fea336cb3a17cb1fea125693dd31c4bea1c538023110c805f8b45d85e", 0xe3, 0x44801, &(0x7f0000000380)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @random="ba7f748c5b6e"}, 0x14) (async) r5 = accept4$packet(r2, 0x0, &(0x7f0000000240), 0x800) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) getpeername$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r9, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r4, 0x2f, 0x80, 0x3f, 0x7, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x7800, 0x10, 0x25, 0x7}}) recvfrom$packet(r9, &(0x7f0000000480)=""/107, 0x6b, 0x3, &(0x7f00000005c0)={0x11, 0x1b, r10, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c040021", @ANYRES16=r11, @ANYBLOB="00022bbd7000fbdbdf25030000000500370001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000000) (async) sendto$packet(r5, &(0x7f0000000280)="fff5d26f7caf853bbc00b410741a37ca91c6065e506a7b5ce5deb4f0255b9bf272355743f917ba9fccd149142ffaa80a8ebdad817d48efcdf823773c7744fe80df3ca6462e4d3541c60b5838eb9b04a0a4ba2275f7a5a9ae424ec036b5ee9fb907eace1e973938623c678b98b5fe5f5e977a5e7f7d03476999291d7e16032d63474f750ed530e3f91f3f122e84a19dea2600d35ad71f2c99a430e7cdfbf48ece70716913e4a92819907e22f1b7db43a044f1b233", 0xb4, 0x2004c894, &(0x7f0000000340)={0x11, 0x8, r7, 0x1, 0x7, 0x6, @broadcast}, 0x14) 19:39:19 executing program 2: r0 = socket$inet(0x2, 0x2, 0x1) (async) r1 = socket(0x3, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xc0, 0x5, 0x21, @dev={0xfe, 0x80, '\x00', 0xb}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1, 0xf887, 0x3, 0x2}}) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x3a, @broadcast, 0x4e20, 0x200, 'sed\x00', 0x20, 0x1f, 0x20}, 0x2c) (async) getpeername$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x20) [ 1300.189261] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 19:39:19 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r4, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000000c0)="ab20dc784828b82c1f140f45f9c771ddb62d5f49a58d602e1baa16c01385080bd85f2fe901724b0e62b45d93c8c75b24d78edf3dbf30ed5858a91cbab9b783dd47fba2c526815dc3e64377947950d6b72f80b32c0aa9de95a8be0017df32669f1f904c55a71d5f708a7457e5a1d46a2ca78973400958", 0x76) r5 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) socketpair(0x2c, 0x4, 0x2, &(0x7f0000000000)) accept4$packet(r5, 0x0, 0x0, 0x0) 19:39:20 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) 19:39:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537acae6efe4df2661e5af7cd32b5f") 19:39:20 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x2, [0x5c, 0x7], 0x101}, 0x10) 19:39:20 executing program 2: r0 = socket$inet(0x2, 0x2, 0x1) (async) r1 = socket(0x3, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xc0, 0x5, 0x21, @dev={0xfe, 0x80, '\x00', 0xb}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1, 0xf887, 0x3, 0x2}}) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x3a, @broadcast, 0x4e20, 0x200, 'sed\x00', 0x20, 0x1f, 0x20}, 0x2c) (async) getpeername$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x20) 19:39:20 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d") [ 1301.047347] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 19:39:20 executing program 2: socket$inet(0x2, 0x2, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 19:39:20 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:20 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x2, [0x5c, 0x7], 0x101}, 0x10) 19:39:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r4, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000000c0)="ab20dc784828b82c1f140f45f9c771ddb62d5f49a58d602e1baa16c01385080bd85f2fe901724b0e62b45d93c8c75b24d78edf3dbf30ed5858a91cbab9b783dd47fba2c526815dc3e64377947950d6b72f80b32c0aa9de95a8be0017df32669f1f904c55a71d5f708a7457e5a1d46a2ca78973400958", 0x76) r5 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) socketpair(0x2c, 0x4, 0x2, &(0x7f0000000000)) 19:39:20 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @loopback, 0x6, 0x1}, 0x20) 19:39:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d") 19:39:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r4, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000000c0)="ab20dc784828b82c1f140f45f9c771ddb62d5f49a58d602e1baa16c01385080bd85f2fe901724b0e62b45d93c8c75b24d78edf3dbf30ed5858a91cbab9b783dd47fba2c526815dc3e64377947950d6b72f80b32c0aa9de95a8be0017df32669f1f904c55a71d5f708a7457e5a1d46a2ca78973400958", 0x76) r5 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) 19:39:20 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x516cdd6e5c4cfae9) 19:39:20 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x2, [0x5c, 0x7], 0x101}, 0x10) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x2, [0x5c, 0x7], 0x101}, 0x10) (async) 19:39:20 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @loopback, 0x6, 0x1}, 0x20) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @loopback, 0x6, 0x1}, 0x20) (async) 19:39:20 executing program 2: socket$inet(0x2, 0x2, 0x6) (async) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 19:39:20 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x516cdd6e5c4cfae9) 19:39:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d") 19:39:20 executing program 1: socket(0x22, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept$packet(r1, 0x0, 0x0) 19:39:20 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @loopback, 0x6, 0x1}, 0x20) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @loopback, 0x6, 0x1}, 0x20) (async) 19:39:20 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 19:39:20 executing program 2: socket$inet(0x2, 0x2, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (rerun: 32) 19:39:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d8ddd37122119790dfc46537aca") 19:39:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r4, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000000c0)="ab20dc784828b82c1f140f45f9c771ddb62d5f49a58d602e1baa16c01385080bd85f2fe901724b0e62b45d93c8c75b24d78edf3dbf30ed5858a91cbab9b783dd47fba2c526815dc3e64377947950d6b72f80b32c0aa9de95a8be0017df32669f1f904c55a71d5f708a7457e5a1d46a2ca78973400958", 0x76) r5 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) 19:39:20 executing program 1: socket(0x22, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept$packet(r1, 0x0, 0x0) 19:39:20 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 19:39:20 executing program 4: r0 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={0x0, 0x31a79a43a439e85f}) socket$nl_generic(0x10, 0x3, 0x10) 19:39:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d8d") 19:39:20 executing program 2: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd08e}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x62880) socket$inet(0x2, 0xa, 0x241c) 19:39:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d") 19:39:21 executing program 1: socket(0x22, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) accept$packet(r1, 0x0, 0x0) 19:39:21 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 19:39:21 executing program 2: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd08e}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x62880) (async) socket$inet(0x2, 0xa, 0x241c) 19:39:21 executing program 4: r0 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={0x0, 0x31a79a43a439e85f}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={0x0, 0x31a79a43a439e85f}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 19:39:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d") 19:39:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r4, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000000c0)="ab20dc784828b82c1f140f45f9c771ddb62d5f49a58d602e1baa16c01385080bd85f2fe901724b0e62b45d93c8c75b24d78edf3dbf30ed5858a91cbab9b783dd47fba2c526815dc3e64377947950d6b72f80b32c0aa9de95a8be0017df32669f1f904c55a71d5f708a7457e5a1d46a2ca78973400958", 0x76) socket$packet(0x11, 0x3, 0x300) 19:39:21 executing program 1: ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0x4a0, 0x7, 0x46b, [0x7, 0x5, 0x3, 0x4e3, 0x6, 0x2, 0x3, 0x80000001]}]}) r0 = socket(0x10, 0x5, 0x1) accept$packet(r0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "93f4b34691f70d69ce597569bf3e0d6b22f75bfcdac06913c4268098d9d31b56442ac109f65d08058296f7868fbbc53701abe513ae0257c535d0a3c34586d75e", 0x25}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x31) 19:39:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d") 19:39:21 executing program 2: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd08e}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x62880) (async) socket$inet(0x2, 0xa, 0x241c) 19:39:21 executing program 4: r0 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={0x0, 0x31a79a43a439e85f}) socket$nl_generic(0x10, 0x3, 0x10) 19:39:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d") 19:39:21 executing program 1: ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0x4a0, 0x7, 0x46b, [0x7, 0x5, 0x3, 0x4e3, 0x6, 0x2, 0x3, 0x80000001]}]}) (async, rerun: 64) r0 = socket(0x10, 0x5, 0x1) (rerun: 64) accept$packet(r0, 0x0, 0x0) (async, rerun: 64) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "93f4b34691f70d69ce597569bf3e0d6b22f75bfcdac06913c4268098d9d31b56442ac109f65d08058296f7868fbbc53701abe513ae0257c535d0a3c34586d75e", 0x25}, 0x48, 0xfffffffffffffffe) (rerun: 64) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x31) 19:39:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d") 19:39:21 executing program 2: r0 = gettid() migrate_pages(r0, 0x80, &(0x7f0000000100)=0x8000, &(0x7f0000000140)=0x2) socket$inet(0x2, 0x800, 0x1) 19:39:21 executing program 4: r0 = socket(0x25, 0x5, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x5, 0x4, 0x1, 0xfbfc}, 'syz1\x00', 0x4c}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250600000006001a004e2000000600030009000000"], 0x24}, 0x1, 0x0, 0x0, 0x886}, 0x4c014) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:21 executing program 1: ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0x4a0, 0x7, 0x46b, [0x7, 0x5, 0x3, 0x4e3, 0x6, 0x2, 0x3, 0x80000001]}]}) (async) r0 = socket(0x10, 0x5, 0x1) accept$packet(r0, 0x0, 0x0) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "93f4b34691f70d69ce597569bf3e0d6b22f75bfcdac06913c4268098d9d31b56442ac109f65d08058296f7868fbbc53701abe513ae0257c535d0a3c34586d75e", 0x25}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x31) 19:39:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r4, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000000c0)="ab20dc784828b82c1f140f45f9c771ddb62d5f49a58d602e1baa16c01385080bd85f2fe901724b0e62b45d93c8c75b24d78edf3dbf30ed5858a91cbab9b783dd47fba2c526815dc3e64377947950d6b72f80b32c0aa9de95a8be0017df32669f1f904c55a71d5f708a7457e5a1d46a2ca78973400958", 0x76) 19:39:22 executing program 4: r0 = socket(0x25, 0x5, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x5, 0x4, 0x1, 0xfbfc}, 'syz1\x00', 0x4c}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250600000006001a004e2000000600030009000000"], 0x24}, 0x1, 0x0, 0x0, 0x886}, 0x4c014) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x25, 0x5, 0x0) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x5, 0x4, 0x1, 0xfbfc}, 'syz1\x00', 0x4c}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250600000006001a004e2000000600030009000000"], 0x24}, 0x1, 0x0, 0x0, 0x886}, 0x4c014) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) 19:39:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="9d") 19:39:22 executing program 2: r0 = gettid() migrate_pages(r0, 0x80, &(0x7f0000000100)=0x8000, &(0x7f0000000140)=0x2) (async) socket$inet(0x2, 0x800, 0x1) 19:39:22 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0xfffffffffffffeca) 19:39:22 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0xfffffffffffffeca) 19:39:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:22 executing program 4: r0 = socket(0x25, 0x5, 0x0) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x5, 0x4, 0x1, 0xfbfc}, 'syz1\x00', 0x4c}) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250600000006001a004e2000000600030009000000"], 0x24}, 0x1, 0x0, 0x0, 0x886}, 0x4c014) (async, rerun: 64) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) 19:39:22 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="9d") 19:39:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r4, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:39:22 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0xfffffffffffffeca) 19:39:22 executing program 2: r0 = gettid() migrate_pages(r0, 0x80, &(0x7f0000000100)=0x8000, &(0x7f0000000140)=0x2) (async, rerun: 32) socket$inet(0x2, 0x800, 0x1) (rerun: 32) 19:39:22 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7fff, 0x88, 0x0, 0x7bc00}, {0x7, 0x5, 0x0, 0x4040000}, {0x9, 0x8, 0x9}, {0x9, 0x5, 0x4, 0x6}]}, 0x10) 19:39:22 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="9d") 19:39:22 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)) 19:39:22 executing program 1: r0 = socket(0x5, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) 19:39:22 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7fff, 0x88, 0x0, 0x7bc00}, {0x7, 0x5, 0x0, 0x4040000}, {0x9, 0x8, 0x9}, {0x9, 0x5, 0x4, 0x6}]}, 0x10) 19:39:22 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="9d") 19:39:22 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)) 19:39:22 executing program 1: r0 = socket(0x5, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socket(0x5, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:22 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7fff, 0x88, 0x0, 0x7bc00}, {0x7, 0x5, 0x0, 0x4040000}, {0x9, 0x8, 0x9}, {0x9, 0x5, 0x4, 0x6}]}, 0x10) 19:39:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r4, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 19:39:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="9d") 19:39:23 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)) 19:39:23 executing program 4: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x0) r1 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req={0x3, 0x3, 0x7ff, 0x4}, 0x10) r2 = socket(0x25, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$rds(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) 19:39:23 executing program 1: r0 = socket(0x5, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socket(0x5, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:23 executing program 2: r0 = request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='none\x00', 0xfffffffffffffffc) getgroups(0x4, &(0x7f0000000200)=[0xee01, 0xee01, 0xee00, 0xee01]) keyctl$chown(0x4, r0, 0xffffffffffffffff, r1) socket$inet(0x2, 0x2, 0x1) r3 = socket$inet(0x2, 0x800, 0xfffffff8) getpeername$inet(r3, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0x11, 0x5, 0xb) getsockopt$packet_int(r4, 0x107, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x6) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000380)={0xffffffffffffffff, 0x4, "99ea83", 0x7, 0x7f}) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000000)={0x4, @empty, 0x4e23, 0x4, 'none\x00', 0x9, 0x1, 0x77}, 0x2c) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getpeername$l2tp6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000002c0)=0x20) getgroups(0x2, &(0x7f00000003c0)=[0xffffffffffffffff, r2]) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000900)={0x0, 0x1, 0x0, &(0x7f0000000500)=[{}], 0x4, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000740)=[{}, {0x0, 0x80000000}, {}, {}], 0x8, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000980)={{0x80000000, 0x0, 0xb6c21d1f2c253842, [0x6, 0x3]}, {r8, 0x0, 0x7, [0x80000000, 0x9]}, 0x4, [0x401, 0x1]}) 19:39:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="9d") 19:39:23 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)) 19:39:23 executing program 4: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x0) (async) r1 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req={0x3, 0x3, 0x7ff, 0x4}, 0x10) (async) r2 = socket(0x25, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$rds(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) 19:39:23 executing program 2: r0 = request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='none\x00', 0xfffffffffffffffc) getgroups(0x4, &(0x7f0000000200)=[0xee01, 0xee01, 0xee00, 0xee01]) keyctl$chown(0x4, r0, 0xffffffffffffffff, r1) (async) socket$inet(0x2, 0x2, 0x1) r3 = socket$inet(0x2, 0x800, 0xfffffff8) getpeername$inet(r3, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r4 = socket(0x11, 0x5, 0xb) getsockopt$packet_int(r4, 0x107, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x6) r5 = socket$inet_dccp(0x2, 0x6, 0x0) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000380)={0xffffffffffffffff, 0x4, "99ea83", 0x7, 0x7f}) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000000)={0x4, @empty, 0x4e23, 0x4, 'none\x00', 0x9, 0x1, 0x77}, 0x2c) (async) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getpeername$l2tp6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000002c0)=0x20) (async) getgroups(0x2, &(0x7f00000003c0)=[0xffffffffffffffff, r2]) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000900)={0x0, 0x1, 0x0, &(0x7f0000000500)=[{}], 0x4, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000740)=[{}, {0x0, 0x80000000}, {}, {}], 0x8, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000980)={{0x80000000, 0x0, 0xb6c21d1f2c253842, [0x6, 0x3]}, {r8, 0x0, 0x7, [0x80000000, 0x9]}, 0x4, [0x401, 0x1]}) 19:39:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="9d") [ 1304.181163] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20003 19:39:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r3, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 19:39:23 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)) 19:39:23 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) accept$packet(r0, 0x0, 0x0) 19:39:23 executing program 4: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x0) (async) r1 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req={0x3, 0x3, 0x7ff, 0x4}, 0x10) (async) r2 = socket(0x25, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$rds(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) (async, rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) 19:39:23 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r2, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:23 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)) 19:39:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="9d") 19:39:23 executing program 2: r0 = request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='none\x00', 0xfffffffffffffffc) (async) getgroups(0x4, &(0x7f0000000200)=[0xee01, 0xee01, 0xee00, 0xee01]) keyctl$chown(0x4, r0, 0xffffffffffffffff, r1) (async) socket$inet(0x2, 0x2, 0x1) r3 = socket$inet(0x2, 0x800, 0xfffffff8) getpeername$inet(r3, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) socket$l2tp(0x2, 0x2, 0x73) (async) r4 = socket(0x11, 0x5, 0xb) getsockopt$packet_int(r4, 0x107, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x6) r5 = socket$inet_dccp(0x2, 0x6, 0x0) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000380)={0xffffffffffffffff, 0x4, "99ea83", 0x7, 0x7f}) (async) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000000)={0x4, @empty, 0x4e23, 0x4, 'none\x00', 0x9, 0x1, 0x77}, 0x2c) (async) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getpeername$l2tp6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000002c0)=0x20) (async) getgroups(0x2, &(0x7f00000003c0)=[0xffffffffffffffff, r2]) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000900)={0x0, 0x1, 0x0, &(0x7f0000000500)=[{}], 0x4, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000740)=[{}, {0x0, 0x80000000}, {}, {}], 0x8, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000980)={{0x80000000, 0x0, 0xb6c21d1f2c253842, [0x6, 0x3]}, {r8, 0x0, 0x7, [0x80000000, 0x9]}, 0x4, [0x401, 0x1]}) 19:39:23 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) accept$packet(r0, 0x0, 0x0) [ 1304.355999] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20003 19:39:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 19:39:23 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:23 executing program 4: write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2710}, 0x4, 0x1ff, 0xaf3f}, 0x18) r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x4, 0x3, 0x40}) socket(0x8, 0x3, 0x100) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="9d") 19:39:23 executing program 2: socket$inet(0x2, 0x800, 0x1002) 19:39:23 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="9d") 19:39:23 executing program 4: write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2710}, 0x4, 0x1ff, 0xaf3f}, 0x18) r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x4, 0x3, 0x40}) socket(0x8, 0x3, 0x100) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2710}, 0x4, 0x1ff, 0xaf3f}, 0x18) (async) socket(0x25, 0x5, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x4, 0x3, 0x40}) (async) socket(0x8, 0x3, 0x100) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) 19:39:23 executing program 1: r0 = socket(0x22, 0x3, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) (async, rerun: 64) accept$packet(r0, 0x0, 0x0) (rerun: 64) 19:39:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 19:39:23 executing program 2: socket$inet(0x2, 0x800, 0x1002) socket$inet(0x2, 0x800, 0x1002) (async) 19:39:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 19:39:23 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:23 executing program 4: write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2710}, 0x4, 0x1ff, 0xaf3f}, 0x18) (async) r0 = socket(0x25, 0x5, 0x0) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async, rerun: 64) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x4, 0x3, 0x40}) (async, rerun: 64) socket(0x8, 0x3, 0x100) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 19:39:23 executing program 1: r0 = socket(0x22, 0xe, 0x0) accept$packet(r0, 0x0, 0x0) 19:39:23 executing program 2: socket$inet(0x2, 0x800, 0x1002) 19:39:23 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 19:39:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 19:39:23 executing program 1: r0 = socket(0x22, 0xe, 0x0) accept$packet(r0, 0x0, 0x0) 19:39:23 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x0, 0x3b1b4b3c, {0x56, 0x7ff, 0x1, {0x5, 0x9}, {0x401}, @rumble={0x4, 0xff}}, {0x57, 0x6, 0x9, {}, {0x8001, 0x1}, @rumble={0x3, 0x9}}}) socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0x3, 0x1) 19:39:23 executing program 4: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf250800000006001d000000000008000a00000000000600010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2050}, 0x8044) r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:23 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 19:39:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 19:39:23 executing program 1: r0 = socket(0x22, 0xe, 0x0) accept$packet(r0, 0x0, 0x0) socket(0x22, 0xe, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:23 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x0, 0x3b1b4b3c, {0x56, 0x7ff, 0x1, {0x5, 0x9}, {0x401}, @rumble={0x4, 0xff}}, {0x57, 0x6, 0x9, {}, {0x8001, 0x1}, @rumble={0x3, 0x9}}}) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0x3, 0x1) 19:39:24 executing program 4: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf250800000006001d000000000008000a00000000000600010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2050}, 0x8044) (async) r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:24 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 19:39:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:24 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3e}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0xfa, 0x6, @link_local}, 0x14) 19:39:24 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x0, 0x3b1b4b3c, {0x56, 0x7ff, 0x1, {0x5, 0x9}, {0x401}, @rumble={0x4, 0xff}}, {0x57, 0x6, 0x9, {}, {0x8001, 0x1}, @rumble={0x3, 0x9}}}) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0x3, 0x1) 19:39:24 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:24 executing program 4: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf250800000006001d000000000008000a00000000000600010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2050}, 0x8044) (async) r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:24 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x0, 0x3b1b4b3c, {0x56, 0x7ff, 0x1, {0x5, 0x9}, {0x401}, @rumble={0x4, 0xff}}, {0x57, 0x6, 0x9, {}, {0x8001, 0x1}, @rumble={0x3, 0x9}}}) socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0x3, 0x1) 19:39:24 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3e}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0xfa, 0x6, @link_local}, 0x14) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3e}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0xfa, 0x6, @link_local}, 0x14) (async) 19:39:24 executing program 2: socket$inet(0x2, 0x2, 0x90a2) 19:39:24 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) 19:39:24 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:24 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x0, 0x3b1b4b3c, {0x56, 0x7ff, 0x1, {0x5, 0x9}, {0x401}, @rumble={0x4, 0xff}}, {0x57, 0x6, 0x9, {}, {0x8001, 0x1}, @rumble={0x3, 0x9}}}) socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0x3, 0x1) 19:39:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 19:39:24 executing program 2: socket$inet(0x2, 0x2, 0x90a2) 19:39:24 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async, rerun: 64) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) (rerun: 64) 19:39:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:24 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x0, 0x3b1b4b3c, {0x56, 0x7ff, 0x1, {0x5, 0x9}, {0x401}, @rumble={0x4, 0xff}}, {0x57, 0x6, 0x9, {}, {0x8001, 0x1}, @rumble={0x3, 0x9}}}) socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0x3, 0x1) 19:39:24 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3e}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0xfa, 0x6, @link_local}, 0x14) 19:39:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)) 19:39:24 executing program 2: socket$inet(0x2, 0x2, 0x90a2) socket$inet(0x2, 0x2, 0x90a2) (async) 19:39:24 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:24 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) (async) 19:39:24 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x0, 0x3b1b4b3c, {0x56, 0x7ff, 0x1, {0x5, 0x9}, {0x401}, @rumble={0x4, 0xff}}, {0x57, 0x6, 0x9, {}, {0x8001, 0x1}, @rumble={0x3, 0x9}}}) socket$inet(0x2, 0x3, 0x1) 19:39:24 executing program 0: r0 = socket(0x5, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) 19:39:24 executing program 2: socket$inet(0x2, 0x6, 0x7ff) 19:39:24 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:24 executing program 1: socket(0x22, 0x3, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4200, 0x0) accept$packet(r0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000140)={r1, 0x3}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 19:39:24 executing program 2: socket$inet(0x2, 0x6, 0x7ff) 19:39:24 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) socket$inet(0x2, 0x3, 0x1) 19:39:24 executing program 4: r0 = socket(0x2c, 0x4, 0x1) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:24 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x0, 0x3b1b4b3c, {0x56, 0x7ff, 0x1, {0x5, 0x9}, {0x401}, @rumble={0x4, 0xff}}, {0x57, 0x6, 0x9, {}, {0x8001, 0x1}, @rumble={0x3, 0x9}}}) socket$inet(0x2, 0x3, 0x1) 19:39:24 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:24 executing program 1: socket(0x22, 0x3, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4200, 0x0) accept$packet(r0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000140)={r1, 0x3}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) socket(0x22, 0x3, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4200, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {}]}) (async) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000140)={r1, 0x3}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) (async) 19:39:24 executing program 4: r0 = socket(0x2c, 0x4, 0x1) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:24 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) 19:39:24 executing program 2: socket$inet(0x2, 0x6, 0x7ff) 19:39:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 19:39:24 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x0, 0x3b1b4b3c, {0x56, 0x7ff, 0x1, {0x5, 0x9}, {0x401}, @rumble={0x4, 0xff}}, {0x57, 0x6, 0x9, {}, {0x8001, 0x1}, @rumble={0x3, 0x9}}}) socket$inet(0x2, 0x3, 0x1) 19:39:24 executing program 4: r0 = socket(0x2c, 0x4, 0x1) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10002, 0x0) read$watch_queue(r1, &(0x7f00000000c0)=""/93, 0x5d) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x86, 0x9, 0xfffc, 0xefc6}, 'syz0\x00', 0x1c}) 19:39:24 executing program 1: socket(0x22, 0x3, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4200, 0x0) accept$packet(r0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000140)={r1, 0x3}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 19:39:24 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x0, 0x3b1b4b3c, {0x56, 0x7ff, 0x1, {0x5, 0x9}, {0x401}, @rumble={0x4, 0xff}}, {0x57, 0x6, 0x9, {}, {0x8001, 0x1}, @rumble={0x3, 0x9}}}) socket$inet(0x2, 0x3, 0x1) 19:39:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 19:39:24 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0xfffffffffffffeac, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) 19:39:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = socket(0x1f, 0x800, 0x80) accept$packet(r1, 0x0, 0x0) 19:39:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10002, 0x0) read$watch_queue(r1, &(0x7f00000000c0)=""/93, 0x5d) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x86, 0x9, 0xfffc, 0xefc6}, 'syz0\x00', 0x1c}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10002, 0x0) (async) read$watch_queue(r1, &(0x7f00000000c0)=""/93, 0x5d) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x86, 0x9, 0xfffc, 0xefc6}, 'syz0\x00', 0x1c}) (async) 19:39:24 executing program 3: socket$inet(0x2, 0x3, 0x1) 19:39:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) r1 = socket(0x1f, 0x800, 0x80) accept$packet(r1, 0x0, 0x0) 19:39:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 19:39:24 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) socket$inet(0x2, 0x3, 0x1) 19:39:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10002, 0x0) read$watch_queue(r1, &(0x7f00000000c0)=""/93, 0x5d) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x86, 0x9, 0xfffc, 0xefc6}, 'syz0\x00', 0x1c}) 19:39:25 executing program 3: socket$inet(0x2, 0x0, 0x1) 19:39:25 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0xfffffffffffffeac, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0xfffffffffffffeac, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) (async) 19:39:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) r1 = socket(0x1f, 0x800, 0x80) accept$packet(r1, 0x0, 0x0) 19:39:25 executing program 2: socket$inet(0x2, 0x3, 0xa64b) 19:39:25 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) 19:39:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) 19:39:25 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0xfffffffffffffeac, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0xfffffffffffffeac, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) (async) 19:39:25 executing program 3: socket$inet(0x2, 0x0, 0x1) 19:39:25 executing program 2: socket$inet(0x2, 0x3, 0xa64b) socket$inet(0x2, 0x3, 0xa64b) (async) 19:39:25 executing program 0: socket$inet(0x2, 0x3, 0x1) 19:39:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) 19:39:25 executing program 2: socket$inet(0x2, 0x3, 0xa64b) 19:39:25 executing program 4: r0 = socket(0xf, 0xa16d135070b3b313, 0x1ffffffd) socket$inet(0x2, 0x4, 0x8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000340)={0x0, 0x8, "e0b164", 0x20, 0x40}) socketpair(0xf, 0x6, 0x148771e6, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x927}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x840) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) bind$packet(r4, &(0x7f0000000300)={0x11, 0xd, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x0, 0x3}, 0x6) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000200)) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:25 executing program 0: socket$inet(0x2, 0x0, 0x1) 19:39:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) 19:39:25 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x64840, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x2, [0xfff, 0x1f]}, {0x80000000, 0x0, 0x6, [0x1]}, 0x2, [0x80000000, 0x8001]}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) socket$inet(0x2, 0x6, 0x3) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x10000) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000140)={0x0, 0x1}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x4c) 19:39:25 executing program 3: socket$inet(0x2, 0x0, 0x1) 19:39:25 executing program 2: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}]}, 0x58}}, 0x80) socket$inet(0x2, 0x2, 0x1) 19:39:25 executing program 4: r0 = socket(0xf, 0xa16d135070b3b313, 0x1ffffffd) (async) socket$inet(0x2, 0x4, 0x8) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000340)={0x0, 0x8, "e0b164", 0x20, 0x40}) socketpair(0xf, 0x6, 0x148771e6, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x927}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x840) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) bind$packet(r4, &(0x7f0000000300)={0x11, 0xd, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x0, 0x3}, 0x6) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000200)) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:25 executing program 2: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}]}, 0x58}}, 0x80) socket$inet(0x2, 0x2, 0x1) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}]}, 0x58}}, 0x80) (async) socket$inet(0x2, 0x2, 0x1) (async) 19:39:25 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x64840, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x2, [0xfff, 0x1f]}, {0x80000000, 0x0, 0x6, [0x1]}, 0x2, [0x80000000, 0x8001]}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) socket$inet(0x2, 0x6, 0x3) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x10000) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000140)={0x0, 0x1}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x4c) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x64840, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) (async) socket(0x22, 0x3, 0x0) (async) accept$packet(r1, 0x0, 0x0) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x2, [0xfff, 0x1f]}, {0x80000000, 0x0, 0x6, [0x1]}, 0x2, [0x80000000, 0x8001]}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) socket$inet(0x2, 0x6, 0x3) (async) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x10000) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000200)}) (async) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x4c) (async) 19:39:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x80, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:25 executing program 3: socket$inet(0x2, 0x3, 0x0) 19:39:25 executing program 0: socket$inet(0x2, 0x0, 0x1) 19:39:25 executing program 4: r0 = socket(0xf, 0xa16d135070b3b313, 0x1ffffffd) socket$inet(0x2, 0x4, 0x8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000340)={0x0, 0x8, "e0b164", 0x20, 0x40}) socketpair(0xf, 0x6, 0x148771e6, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x927}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x840) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) bind$packet(r4, &(0x7f0000000300)={0x11, 0xd, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x0, 0x3}, 0x6) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000200)) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0xf, 0xa16d135070b3b313, 0x1ffffffd) (async) socket$inet(0x2, 0x4, 0x8) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000340)={0x0, 0x8, "e0b164", 0x20, 0x40}) (async) socketpair(0xf, 0x6, 0x148771e6, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x927}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x840) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) bind$packet(r4, &(0x7f0000000300)={0x11, 0xd, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x0, 0x3}, 0x6) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000200)) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) 19:39:25 executing program 2: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}]}, 0x58}}, 0x80) socket$inet(0x2, 0x2, 0x1) 19:39:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:25 executing program 0: socket$inet(0x2, 0x0, 0x1) 19:39:25 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x64840, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x2, [0xfff, 0x1f]}, {0x80000000, 0x0, 0x6, [0x1]}, 0x2, [0x80000000, 0x8001]}) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) socket$inet(0x2, 0x6, 0x3) (async) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x10000) (async) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000200)}) (async) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x4c) 19:39:25 executing program 2: socket$inet(0x2, 0x2, 0x0) 19:39:25 executing program 3: socket$inet(0x2, 0x3, 0x0) 19:39:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:25 executing program 2: socket$inet(0x2, 0x2, 0x0) 19:39:25 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0xff, [0xffffffff, 0x2da], 0x5}, 0x10) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:25 executing program 0: socket$inet(0x2, 0x3, 0x0) 19:39:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, 0x10, 0x28, 0x7, 0x4010000}}) 19:39:25 executing program 3: socket$inet(0x2, 0x3, 0x0) 19:39:25 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="02c3c472b6b43077d47c31f5a6bb5bdb225d3ee3c93e05ea849be0f473526edd15122f415e20cdda29752e9cf7f9794463c1ca74a3f08f7fcd8d66feb1ca116b8d877b3aba884d20cd52e6ab409cb6761a3758b37624dd551de600fabf8839f7d5596e41ab9fc514f66c3728851d6ae6dc9f830f18a1de566eea22626fb35805593673a0f9977e166d33ff0e5381f6923aecb4e0b3759417539071cdadc6c3207fd8d3635ceeb7c3265e616cca904124e4cac1262590b816a50a593abf610691", 0xc0}) 19:39:25 executing program 2: socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) (async) 19:39:25 executing program 4: r0 = socket(0x25, 0x5, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0xff, [0xffffffff, 0x2da], 0x5}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, 0x0, 0x28, 0x7, 0x4010000}}) 19:39:25 executing program 0: socket$inet(0x2, 0x3, 0x0) 19:39:25 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="02c3c472b6b43077d47c31f5a6bb5bdb225d3ee3c93e05ea849be0f473526edd15122f415e20cdda29752e9cf7f9794463c1ca74a3f08f7fcd8d66feb1ca116b8d877b3aba884d20cd52e6ab409cb6761a3758b37624dd551de600fabf8839f7d5596e41ab9fc514f66c3728851d6ae6dc9f830f18a1de566eea22626fb35805593673a0f9977e166d33ff0e5381f6923aecb4e0b3759417539071cdadc6c3207fd8d3635ceeb7c3265e616cca904124e4cac1262590b816a50a593abf610691", 0xc0}) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="02c3c472b6b43077d47c31f5a6bb5bdb225d3ee3c93e05ea849be0f473526edd15122f415e20cdda29752e9cf7f9794463c1ca74a3f08f7fcd8d66feb1ca116b8d877b3aba884d20cd52e6ab409cb6761a3758b37624dd551de600fabf8839f7d5596e41ab9fc514f66c3728851d6ae6dc9f830f18a1de566eea22626fb35805593673a0f9977e166d33ff0e5381f6923aecb4e0b3759417539071cdadc6c3207fd8d3635ceeb7c3265e616cca904124e4cac1262590b816a50a593abf610691", 0xc0}) (async) 19:39:25 executing program 3: socket$inet(0x2, 0x3, 0x0) 19:39:26 executing program 2: r0 = socket$inet(0x2, 0x2, 0x1) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) 19:39:26 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0xff, [0xffffffff, 0x2da], 0x5}, 0x10) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x25, 0x5, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0xff, [0xffffffff, 0x2da], 0x5}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) 19:39:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, 0x0, 0x0, 0x7, 0x4010000}}) 19:39:26 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="02c3c472b6b43077d47c31f5a6bb5bdb225d3ee3c93e05ea849be0f473526edd15122f415e20cdda29752e9cf7f9794463c1ca74a3f08f7fcd8d66feb1ca116b8d877b3aba884d20cd52e6ab409cb6761a3758b37624dd551de600fabf8839f7d5596e41ab9fc514f66c3728851d6ae6dc9f830f18a1de566eea22626fb35805593673a0f9977e166d33ff0e5381f6923aecb4e0b3759417539071cdadc6c3207fd8d3635ceeb7c3265e616cca904124e4cac1262590b816a50a593abf610691", 0xc0}) 19:39:26 executing program 2: r0 = socket$inet(0x2, 0x2, 0x1) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) 19:39:26 executing program 3: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0xfffffffffffffeac, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) 19:39:26 executing program 4: r0 = socket(0x25, 0x5, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x7, 0x1, 0x7, 0x82}, {0x8, 0x6, 0x79, 0x4}, {0x1, 0x2, 0x80, 0x76f}, {0x800, 0x96, 0x3, 0x456}, {0x200, 0x7f, 0x0, 0x1}, {0x4b2, 0x99, 0x3, 0xaa94}, {0x8, 0x3, 0x5, 0x800}]}, 0x10) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) 19:39:26 executing program 0: socket$inet(0x2, 0x3, 0x0) 19:39:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, 0x0, 0x0, 0x0, 0x4010000}}) 19:39:26 executing program 2: r0 = socket$inet(0x2, 0x2, 0x1) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) 19:39:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000000)="d1fed5e71400edeb2ce7ad6787d67233355956fd242f4a7d0dfa2ed8c8ee1ffd6e5de4bde930abe311c1f71bbd14017e0b0c591e08224a6058b588a1199d3f7531491e5a3efe", 0x46) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) 19:39:26 executing program 4: r0 = socket(0x25, 0x5, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x7, 0x1, 0x7, 0x82}, {0x8, 0x6, 0x79, 0x4}, {0x1, 0x2, 0x80, 0x76f}, {0x800, 0x96, 0x3, 0x456}, {0x200, 0x7f, 0x0, 0x1}, {0x4b2, 0x99, 0x3, 0xaa94}, {0x8, 0x3, 0x5, 0x800}]}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) 19:39:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}) 19:39:26 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r0, 0x0, 0x3}) 19:39:26 executing program 3: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0xfffffffffffffeac, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) 19:39:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000000)="d1fed5e71400edeb2ce7ad6787d67233355956fd242f4a7d0dfa2ed8c8ee1ffd6e5de4bde930abe311c1f71bbd14017e0b0c591e08224a6058b588a1199d3f7531491e5a3efe", 0x46) (async) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) 19:39:26 executing program 4: r0 = socket(0x25, 0x5, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x7, 0x1, 0x7, 0x82}, {0x8, 0x6, 0x79, 0x4}, {0x1, 0x2, 0x80, 0x76f}, {0x800, 0x96, 0x3, 0x456}, {0x200, 0x7f, 0x0, 0x1}, {0x4b2, 0x99, 0x3, 0xaa94}, {0x8, 0x3, 0x5, 0x800}]}, 0x10) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) socket(0x25, 0x5, 0x0) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x7, 0x1, 0x7, 0x82}, {0x8, 0x6, 0x79, 0x4}, {0x1, 0x2, 0x80, 0x76f}, {0x800, 0x96, 0x3, 0x456}, {0x200, 0x7f, 0x0, 0x1}, {0x4b2, 0x99, 0x3, 0xaa94}, {0x8, 0x3, 0x5, 0x800}]}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) (async) 19:39:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, 0x0, 0x0, 0x0, 0x4010000}}) 19:39:26 executing program 0: r0 = gettid() migrate_pages(r0, 0x80, &(0x7f0000000100)=0x8000, &(0x7f0000000140)=0x2) socket$inet(0x2, 0x800, 0x1) 19:39:26 executing program 3: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0xfffffffffffffeac, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) 19:39:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000000)="d1fed5e71400edeb2ce7ad6787d67233355956fd242f4a7d0dfa2ed8c8ee1ffd6e5de4bde930abe311c1f71bbd14017e0b0c591e08224a6058b588a1199d3f7531491e5a3efe", 0x46) (async) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) 19:39:26 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r0, 0x0, 0x3}) 19:39:26 executing program 4: r0 = socket(0x6, 0x3, 0xff1) socketpair(0x1d, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) sendmsg$rds(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 19:39:26 executing program 5: socket$inet(0x2, 0x2, 0x1) r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r0, 0x0, 0x3}) 19:39:26 executing program 1: r0 = socket(0x25, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000000)="10e5965972dc99ebd95e16f5e344a3096778d1430bd6", 0x16) 19:39:26 executing program 3: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0xfffffffffffffeac, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) 19:39:26 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r0, 0x0, 0x3}) socket$inet(0x2, 0x2, 0x1) (async) gettid() (async) sched_getaffinity(r0, 0x8, &(0x7f0000000000)) (async) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r0, 0x0, 0x3}) (async) 19:39:26 executing program 1: r0 = socket(0x25, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000000)="10e5965972dc99ebd95e16f5e344a3096778d1430bd6", 0x16) 19:39:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 19:39:26 executing program 3: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x4004000, &(0x7f0000000140)={0x11, 0xf5, r2, 0x1, 0x8, 0x6, @remote}, 0x14) 19:39:26 executing program 4: r0 = socket(0x6, 0x3, 0xff1) socketpair(0x1d, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) sendmsg$rds(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) socket(0x6, 0x3, 0xff1) (async) socketpair(0x1d, 0xa, 0x3, &(0x7f0000000000)) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) (async) sendmsg$rds(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) (async) 19:39:26 executing program 2: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) [ 1307.485051] can: request_module (can-proto-3) failed. 19:39:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 19:39:26 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:26 executing program 1: r0 = socket(0x25, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000000)="10e5965972dc99ebd95e16f5e344a3096778d1430bd6", 0x16) 19:39:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 19:39:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x4004000, &(0x7f0000000140)={0x11, 0xf5, r2, 0x1, 0x8, 0x6, @remote}, 0x14) 19:39:26 executing program 2: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) (async) 19:39:26 executing program 1: r0 = socket(0xf, 0x74cfcc0a230e652a, 0x200007) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8154}, 0x20000094) r2 = accept$packet(r0, 0x0, 0x0) r3 = accept4$packet(r2, 0x0, &(0x7f0000000000), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0xf7, r4, 0x1, 0x4, 0x6, @remote}, 0x14) 19:39:26 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) 19:39:26 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1307.585021] can: request_module (can-proto-3) failed. 19:39:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x3, 0x24001) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) 19:39:26 executing program 4: r0 = socket(0x6, 0x3, 0xff1) (async) socketpair(0x1d, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) sendmsg$rds(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 19:39:26 executing program 1: r0 = socket(0xf, 0x74cfcc0a230e652a, 0x200007) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8154}, 0x20000094) r2 = accept$packet(r0, 0x0, 0x0) r3 = accept4$packet(r2, 0x0, &(0x7f0000000000), 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0xf7, r4, 0x1, 0x4, 0x6, @remote}, 0x14) 19:39:26 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) 19:39:26 executing program 2: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) (async) [ 1307.636110] can: request_module (can-proto-3) failed. 19:39:26 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:26 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) 19:39:26 executing program 1: r0 = socket(0xf, 0x74cfcc0a230e652a, 0x200007) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8154}, 0x20000094) r2 = accept$packet(r0, 0x0, 0x0) r3 = accept4$packet(r2, 0x0, &(0x7f0000000000), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0xf7, r4, 0x1, 0x4, 0x6, @remote}, 0x14) socket(0xf, 0x74cfcc0a230e652a, 0x200007) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8154}, 0x20000094) (async) accept$packet(r0, 0x0, 0x0) (async) accept4$packet(r2, 0x0, &(0x7f0000000000), 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) (async) bind$packet(r3, &(0x7f0000000080)={0x11, 0xf7, r4, 0x1, 0x4, 0x6, @remote}, 0x14) (async) 19:39:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x3, 0x24001) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) 19:39:26 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:26 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xf0) socket(0x21, 0x6, 0x5) socket(0x0, 0x5, 0x8) [ 1307.662208] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 [ 1307.699091] can: request_module (can-proto-3) failed. 19:39:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) 19:39:26 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x102, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED, @BATADV_ATTR_GW_SEL_CLASS={0x54, 0x34, 0x40007}]}, 0xfffffffffffffe69}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000240)=""/2, 0x2, 0x52, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d1}, 0x40) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) socket$inet(0x2, 0x2, 0x1) 19:39:26 executing program 3: r0 = socket(0x0, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) 19:39:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x3, 0x24001) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) 19:39:26 executing program 1: socket(0x1a, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28181, 0x0) accept$packet(r1, 0x0, 0x0) 19:39:26 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x102, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED, @BATADV_ATTR_GW_SEL_CLASS={0x54, 0x34, 0x40007}]}, 0xfffffffffffffe69}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000240)=""/2, 0x2, 0x52, 0x0, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d1}, 0x40) (async, rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) ioctl$UI_DEV_DESTROY(r2, 0x5502) (async) socket$inet(0x2, 0x2, 0x1) [ 1307.757327] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 19:39:26 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xf0) socket(0x21, 0x6, 0x5) socket(0x0, 0x5, 0x8) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xf0) (async) socket(0x21, 0x6, 0x5) (async) socket(0x0, 0x5, 0x8) (async) 19:39:26 executing program 3: r0 = socket(0x0, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x3, 0x24001) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:26 executing program 1: socket(0x1a, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28181, 0x0) accept$packet(r1, 0x0, 0x0) socket(0x1a, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28181, 0x0) (async) accept$packet(r1, 0x0, 0x0) (async) 19:39:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) 19:39:26 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x102, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED, @BATADV_ATTR_GW_SEL_CLASS={0x54, 0x34, 0x40007}]}, 0xfffffffffffffe69}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000240)=""/2, 0x2, 0x52, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d1}, 0x40) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) socket$inet(0x2, 0x2, 0x1) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x102, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED, @BATADV_ATTR_GW_SEL_CLASS={0x54, 0x34, 0x40007}]}, 0xfffffffffffffe69}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000240)=""/2, 0x2, 0x52, 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d1}, 0x40) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) ioctl$UI_DEV_DESTROY(r2, 0x5502) (async) socket$inet(0x2, 0x2, 0x1) (async) [ 1307.830494] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 19:39:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 19:39:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x3, 0x24001) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:26 executing program 1: socket(0x1a, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28181, 0x0) accept$packet(r1, 0x0, 0x0) socket(0x1a, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28181, 0x0) (async) accept$packet(r1, 0x0, 0x0) (async) 19:39:26 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xf0) socket(0x21, 0x6, 0x5) socket(0x0, 0x5, 0x8) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xf0) (async) socket(0x21, 0x6, 0x5) (async) socket(0x0, 0x5, 0x8) (async) [ 1307.889252] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 19:39:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x3, 0x24001) pipe2$watch_queue(&(0x7f00000000c0), 0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:26 executing program 2: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xefd, 0x8001, 0x7, 0x3}, 'syz1\x00', 0xb}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x0}, {0x0}, {}, {}, {}, {}, {}]}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000380)={r1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000340)={0x2}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={r0, 0x3, &(0x7f0000000180)=[0x6, 0x9, 0x5], &(0x7f0000000140)=[0x9, 0xfff, 0x5, 0x6, 0x7fff, 0x0, 0x5, 0x4, 0x8, 0x4], 0x28, 0x1, 0x3, &(0x7f00000003c0)=[0x8], &(0x7f00000001c0)=[0xffff, 0x1ef, 0x8001, 0x2, 0x0, 0x5]}) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000240)) 19:39:26 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendto$l2tp6(r1, &(0x7f0000000200)="861ebf3b22bb1a648bb6694153844a2b198fa22cf4fa8a7b9a54607f8080e8e9910cabc8726944aeff8a574b3d80319905b15ca5c0772e44cf37b32bb9d91ac636f0981711812b69b9fff0cd38d2962b2a6e2e4936a9d6cb11473f117b024a9ac5e8b29d96bc0fa057e15176f1d2807ee016fcf39577895dec12baad8c8c14b4676e752713bf8818443c05071f4fc5c8bdc340fc086366b1dd74a24569782cea5721fb74e256cead963fd42239f8eee5acbc2c38df3760229907e4c06527eb8be49e0659e6dee0dfce1e3194ce", 0xcd, 0x14000041, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xc3, 0x2}, 0x20) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) getgroups(0x4, &(0x7f0000000180)=[0x0, 0xee00, 0xee01, 0xee01]) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) getgroups(0x5, &(0x7f00000003c0)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) getgroups(0x8, &(0x7f00000004c0)=[r4, r5, r6, 0xee01, r7, 0xffffffffffffffff, 0x0, 0xee00]) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004041}, 0x40000) [ 1307.937385] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 19:39:26 executing program 3: r0 = socket(0x0, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 19:39:27 executing program 2: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xefd, 0x8001, 0x7, 0x3}, 'syz1\x00', 0xb}) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x0}, {0x0}, {}, {}, {}, {}, {}]}) (async) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) (async) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000380)={r1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000340)={0x2}) (async) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={r0, 0x3, &(0x7f0000000180)=[0x6, 0x9, 0x5], &(0x7f0000000140)=[0x9, 0xfff, 0x5, 0x6, 0x7fff, 0x0, 0x5, 0x4, 0x8, 0x4], 0x28, 0x1, 0x3, &(0x7f00000003c0)=[0x8], &(0x7f00000001c0)=[0xffff, 0x1ef, 0x8001, 0x2, 0x0, 0x5]}) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000240)) 19:39:27 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendto$l2tp6(r1, &(0x7f0000000200)="861ebf3b22bb1a648bb6694153844a2b198fa22cf4fa8a7b9a54607f8080e8e9910cabc8726944aeff8a574b3d80319905b15ca5c0772e44cf37b32bb9d91ac636f0981711812b69b9fff0cd38d2962b2a6e2e4936a9d6cb11473f117b024a9ac5e8b29d96bc0fa057e15176f1d2807ee016fcf39577895dec12baad8c8c14b4676e752713bf8818443c05071f4fc5c8bdc340fc086366b1dd74a24569782cea5721fb74e256cead963fd42239f8eee5acbc2c38df3760229907e4c06527eb8be49e0659e6dee0dfce1e3194ce", 0xcd, 0x14000041, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xc3, 0x2}, 0x20) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) getgroups(0x4, &(0x7f0000000180)=[0x0, 0xee00, 0xee01, 0xee01]) (async) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) (async) getgroups(0x5, &(0x7f00000003c0)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) (async) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) getgroups(0x8, &(0x7f00000004c0)=[r4, r5, r6, 0xee01, r7, 0xffffffffffffffff, 0x0, 0xee00]) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004041}, 0x40000) [ 1307.996429] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 19:39:27 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x3, 0x24001) pipe2$watch_queue(&(0x7f00000000c0), 0x80) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 19:39:27 executing program 3: r0 = socket(0x25, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:27 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendto$l2tp6(r1, &(0x7f0000000200)="861ebf3b22bb1a648bb6694153844a2b198fa22cf4fa8a7b9a54607f8080e8e9910cabc8726944aeff8a574b3d80319905b15ca5c0772e44cf37b32bb9d91ac636f0981711812b69b9fff0cd38d2962b2a6e2e4936a9d6cb11473f117b024a9ac5e8b29d96bc0fa057e15176f1d2807ee016fcf39577895dec12baad8c8c14b4676e752713bf8818443c05071f4fc5c8bdc340fc086366b1dd74a24569782cea5721fb74e256cead963fd42239f8eee5acbc2c38df3760229907e4c06527eb8be49e0659e6dee0dfce1e3194ce", 0xcd, 0x14000041, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xc3, 0x2}, 0x20) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) getgroups(0x4, &(0x7f0000000180)=[0x0, 0xee00, 0xee01, 0xee01]) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) getgroups(0x5, &(0x7f00000003c0)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) getgroups(0x8, &(0x7f00000004c0)=[r4, r5, r6, 0xee01, r7, 0xffffffffffffffff, 0x0, 0xee00]) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004041}, 0x40000) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) sendto$l2tp6(r1, &(0x7f0000000200)="861ebf3b22bb1a648bb6694153844a2b198fa22cf4fa8a7b9a54607f8080e8e9910cabc8726944aeff8a574b3d80319905b15ca5c0772e44cf37b32bb9d91ac636f0981711812b69b9fff0cd38d2962b2a6e2e4936a9d6cb11473f117b024a9ac5e8b29d96bc0fa057e15176f1d2807ee016fcf39577895dec12baad8c8c14b4676e752713bf8818443c05071f4fc5c8bdc340fc086366b1dd74a24569782cea5721fb74e256cead963fd42239f8eee5acbc2c38df3760229907e4c06527eb8be49e0659e6dee0dfce1e3194ce", 0xcd, 0x14000041, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xc3, 0x2}, 0x20) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) getgroups(0x4, &(0x7f0000000180)=[0x0, 0xee00, 0xee01, 0xee01]) (async) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) (async) getgroups(0x5, &(0x7f00000003c0)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) (async) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) (async) getgroups(0x8, &(0x7f00000004c0)=[r4, r5, r6, 0xee01, r7, 0xffffffffffffffff, 0x0, 0xee00]) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004041}, 0x40000) (async) 19:39:27 executing program 2: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xefd, 0x8001, 0x7, 0x3}, 'syz1\x00', 0xb}) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x0}, {0x0}, {}, {}, {}, {}, {}]}) (async) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000380)={r1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000340)={0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={r0, 0x3, &(0x7f0000000180)=[0x6, 0x9, 0x5], &(0x7f0000000140)=[0x9, 0xfff, 0x5, 0x6, 0x7fff, 0x0, 0x5, 0x4, 0x8, 0x4], 0x28, 0x1, 0x3, &(0x7f00000003c0)=[0x8], &(0x7f00000001c0)=[0xffff, 0x1ef, 0x8001, 0x2, 0x0, 0x5]}) (rerun: 64) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000240)) 19:39:27 executing program 3: r0 = socket(0x25, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:27 executing program 5: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendto$l2tp6(r1, &(0x7f0000000200)="861ebf3b22bb1a648bb6694153844a2b198fa22cf4fa8a7b9a54607f8080e8e9910cabc8726944aeff8a574b3d80319905b15ca5c0772e44cf37b32bb9d91ac636f0981711812b69b9fff0cd38d2962b2a6e2e4936a9d6cb11473f117b024a9ac5e8b29d96bc0fa057e15176f1d2807ee016fcf39577895dec12baad8c8c14b4676e752713bf8818443c05071f4fc5c8bdc340fc086366b1dd74a24569782cea5721fb74e256cead963fd42239f8eee5acbc2c38df3760229907e4c06527eb8be49e0659e6dee0dfce1e3194ce", 0xcd, 0x14000041, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xc3, 0x2}, 0x20) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) getgroups(0x4, &(0x7f0000000180)=[0x0, 0xee00, 0xee01, 0xee01]) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) getgroups(0x5, &(0x7f00000003c0)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) getgroups(0x8, &(0x7f00000004c0)=[r4, r5, r6, 0xee01, r7, 0xffffffffffffffff, 0x0, 0xee00]) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004041}, 0x40000) [ 1308.132918] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 19:39:27 executing program 3: r0 = socket(0x25, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:27 executing program 2: socket$inet(0x2, 0x3, 0x1) 19:39:27 executing program 5: r0 = socket(0x5, 0x5, 0xc0000000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001336c0f5f1fb9c7bdc597813487c0726b41101163acc62f1e384524533b4e69b6448ab83c1ed69fafd5e2d3bcd03058139907f", @ANYRES16=0x0, @ANYBLOB="02002dbd7002fedbdf250b0024888e703b00010000000500290000000000080001000000ec0200000001000005002a0001007c0005002a0001000000ea0f610d3b5750716c08003100ff07000008000b0000fb8f20ddc600003c00"/101], 0x64}, 0x1, 0x0, 0x0, 0x5000}, 0x810) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0xc) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000b1}, 0x8001) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x8000000000000000, 0x882) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000200)={r2, 0x11}) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x12) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000040)={r2, 0x14}) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f00000002c0)) r6 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000280)={0x7}) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r7, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000340)={0x7}) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) 19:39:27 executing program 3: socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:27 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x3, 0x24001) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:27 executing program 2: socket$inet(0x2, 0x3, 0x1) 19:39:27 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000180), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000880)={0x0, 0x7, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000002c0)=[{}, {}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x5, 0x0, &(0x7f0000000780)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000440)={{0x80000000, r3, 0x4, [0x4]}, {r4, r5, 0x4, [0x0, 0x2]}, 0x0, [0x401, 0x81]}) 19:39:27 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) r2 = accept$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000380)={r5, 0x1, 0x6, @local}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="18042bbd7000fcdbdf250300000008000b0002000000050004004000000008000a00000000000c000f00f7ffffffffffffff06000300090000007365929b7720a6060001000400000008001700", @ANYRES32=r0, @ANYBLOB="08000c000400000008001900ac1414240500120006000000"], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) socketpair(0x26, 0x3, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', r8, 0x2f, 0x1f, 0x5, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x10, 0x3f, 0x7bed}}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r8, 0x1, 0xfffffffb}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r9) 19:39:27 executing program 3: socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:27 executing program 2: socket$inet(0x2, 0x3, 0x1) 19:39:27 executing program 4: r0 = socket(0x25, 0x5, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 32) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {{}, {0x80000000, 0x0}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000180), &(0x7f0000000200)=[{{0x80000000}}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000880)={0x0, 0x7, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000002c0)=[{}, {}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x5, 0x0, &(0x7f0000000780)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000440)={{0x80000000, r3, 0x4, [0x4]}, {r4, r5, 0x4, [0x0, 0x2]}, 0x0, [0x401, 0x81]}) [ 1308.267762] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 19:39:27 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x511300, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:27 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="1da4ffc223aead6897da6544650fce9cef87b97b98389ec96e5c7907292522b4aebd100d16dd0c237f901f3cc572bd841933264903d5874411d92716777bf492299d64268f623548e1691953ee5f62ea9c55969b23a292daa80074248e186c34e7f9430aed74944ce02350ad5ac581821379d6685f33ecec61cb41710bfc5dba38b5d562b3fd5058fb8efb5de718cc4e89af2cd99a169a882bb7d98c5503bc82239d8fe5abbd17d5f330662f505e11e31a731667c71a1c7b4cc79b6f003e46ab2dd5296e6ab49337fec068be1ed3", 0xce, 0x4004000, &(0x7f0000000140)={0x11, 0xf5, r1, 0x1, 0x8, 0x6, @remote}, 0x14) 19:39:27 executing program 2: socket$inet(0x2, 0x80000, 0x1) 19:39:27 executing program 3: socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:39:27 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000000080)) 19:39:27 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000180), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000880)={0x0, 0x7, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000002c0)=[{}, {}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x5, 0x0, &(0x7f0000000780)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000440)={{0x80000000, r3, 0x4, [0x4]}, {r4, r5, 0x4, [0x0, 0x2]}, 0x0, [0x401, 0x81]}) socket(0x25, 0x5, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000180), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000880)={0x0, 0x7, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000002c0)=[{}, {}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000780)=[{}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000440)={{0x80000000, r3, 0x4, [0x4]}, {r4, r5, 0x4, [0x0, 0x2]}, 0x0, [0x401, 0x81]}) (async) 19:39:27 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) r2 = accept$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) (async, rerun: 32) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000380)={r5, 0x1, 0x6, @local}, 0x10) (async, rerun: 32) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, 0x0) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="18042bbd7000fcdbdf250300000008000b0002000000050004004000000008000a00000000000c000f00f7ffffffffffffff06000300090000007365929b7720a6060001000400000008001700", @ANYRES32=r0, @ANYBLOB="08000c000400000008001900ac1414240500120006000000"], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) socketpair(0x26, 0x3, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', r8, 0x2f, 0x1f, 0x5, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x10, 0x3f, 0x7bed}}) (async) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r8, 0x1, 0xfffffffb}, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r9) (rerun: 64) 19:39:27 executing program 2: socket$inet(0x2, 0x80000, 0x1) 19:39:27 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x5b, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000180)={0x67, @rand_addr=0x64010100, 0x4e24, 0x2, 'fo\x00', 0x12, 0x8, 0x5}, 0x2c) [ 1308.360845] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 19:39:27 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:27 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:27 executing program 4: r0 = socket(0x25, 0x2, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:27 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x400) r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4) 19:39:27 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x5b, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000180)={0x67, @rand_addr=0x64010100, 0x4e24, 0x2, 'fo\x00', 0x12, 0x8, 0x5}, 0x2c) 19:39:27 executing program 2: socket$inet(0x2, 0x80000, 0x1) 19:39:27 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:27 executing program 4: r0 = socket(0x25, 0x2, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x25, 0x2, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) [ 1308.479993] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 19:39:27 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r3, &(0x7f00000001c0)="82a28b53c7bb229fc8f08b2fef1b74c48e7b165a288a1efb43bad9ccf3af4bfa596736f63d27118b5f1d46c22e7f0eda40e9cf4d8169f9f22b582d65074501ad76ed121e20cafa39c7011dd08a02ca30cdf2d5e2add70f7d774caef21cd570a4be62d377691cf3351daa162ddf7c45edff48b0b1fa536363075a3142cdec4ebb476ff4a39fc499918487bc0957338304c9b1d66469eb8e9269ffb3848ccc6b1d803d7f257c954ac0ed01d86cadeec1c8f75f6ca1fe8b5cf1aba2ff49239c883607c2b86bf32466b584220af4f385521ab4b5c497933126631c9ac666075670605ab1bfb3bff20a37e609de78eadd45c53e9733f8f0c323", 0xf7, 0x8080, &(0x7f0000000100)={0x11, 0x7, r5, 0x1, 0x81, 0x6, @multicast}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r6, 0x0, 0x0, 0x40000000, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000000)="1da4ffc223aead6897da6544650fce9cef87b97b98389ec96e5c7907292522b4aebd100d16dd0c237f901f3cc572bd841933264903d5874411d92716777bf492299d64268f623548e1691953ee5f62ea9c55969b23a292daa80074248e186c34e7f9430aed74944ce02350ad5ac581821379d6685f33ecec61cb41710bfc5dba38b5d562b3fd5058fb8efb5de718cc4e89af2cd99a169a882bb7d98c5503bc82239d8fe5abbd17d5f330662f505e11e31a731667c71a1c7b4cc79b6f003e46ab2dd5296e6ab49337fec068be1ed3", 0xce, 0x4004000, &(0x7f0000000140)={0x11, 0xf5, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) [ 1308.565727] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 19:39:27 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) r2 = accept$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000380)={r5, 0x1, 0x6, @local}, 0x10) (async, rerun: 32) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, 0x0) (async, rerun: 64) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="18042bbd7000fcdbdf250300000008000b0002000000050004004000000008000a00000000000c000f00f7ffffffffffffff06000300090000007365929b7720a6060001000400000008001700", @ANYRES32=r0, @ANYBLOB="08000c000400000008001900ac1414240500120006000000"], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) socketpair(0x26, 0x3, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', r8, 0x2f, 0x1f, 0x5, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x10, 0x3f, 0x7bed}}) (async) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r8, 0x1, 0xfffffffb}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r9) 19:39:27 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x5b, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000180)={0x67, @rand_addr=0x64010100, 0x4e24, 0x2, 'fo\x00', 0x12, 0x8, 0x5}, 0x2c) 19:39:27 executing program 0: setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:27 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r3, &(0x7f00000001c0)="82a28b53c7bb229fc8f08b2fef1b74c48e7b165a288a1efb43bad9ccf3af4bfa596736f63d27118b5f1d46c22e7f0eda40e9cf4d8169f9f22b582d65074501ad76ed121e20cafa39c7011dd08a02ca30cdf2d5e2add70f7d774caef21cd570a4be62d377691cf3351daa162ddf7c45edff48b0b1fa536363075a3142cdec4ebb476ff4a39fc499918487bc0957338304c9b1d66469eb8e9269ffb3848ccc6b1d803d7f257c954ac0ed01d86cadeec1c8f75f6ca1fe8b5cf1aba2ff49239c883607c2b86bf32466b584220af4f385521ab4b5c497933126631c9ac666075670605ab1bfb3bff20a37e609de78eadd45c53e9733f8f0c323", 0xf7, 0x8080, &(0x7f0000000100)={0x11, 0x7, r5, 0x1, 0x81, 0x6, @multicast}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r6, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="1da4ffc223aead6897da6544650fce9cef87b97b98389ec96e5c7907292522b4aebd100d16dd0c237f901f3cc572bd841933264903d5874411d92716777bf492299d64268f623548e1691953ee5f62ea9c55969b23a292daa80074248e186c34e7f9430aed74944ce02350ad5ac581821379d6685f33ecec61cb41710bfc5dba38b5d562b3fd5058fb8efb5de718cc4e89af2cd99a169a882bb7d98c5503bc82239d8fe5abbd17d5f330662f505e11e31a731667c71a1c7b4cc79b6f003e46ab2dd5296e6ab49337fec068be1ed3", 0xce, 0x4004000, &(0x7f0000000140)={0x11, 0xf5, r7, 0x1, 0x8, 0x6, @remote}, 0x14) 19:39:27 executing program 4: r0 = socket(0x25, 0x2, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x25, 0x2, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) 19:39:27 executing program 2: socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0xa, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}]}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000100)={0x0, 0x7}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x4e20, 0x1, 'wrr\x00', 0x0, 0x6, 0x6}, 0x2c) 19:39:27 executing program 2: socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0xa, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}]}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000100)={0x0, 0x7}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x4e20, 0x1, 'wrr\x00', 0x0, 0x6, 0x6}, 0x2c) 19:39:27 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x5b, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x22, 0x3, 0x0) accept$packet(r1, 0x0, 0x0) 19:39:27 executing program 0: setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:27 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (fail_nth: 1) 19:39:27 executing program 4: sendmsg$rds(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:27 executing program 2: socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0xa, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}]}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000100)={0x0, 0x7}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x4e20, 0x1, 'wrr\x00', 0x0, 0x6, 0x6}, 0x2c) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0xa, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}]}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000100)={0x0, 0x7}) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x4e20, 0x1, 'wrr\x00', 0x0, 0x6, 0x6}, 0x2c) (async) 19:39:27 executing program 1: r0 = socket(0x22, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) accept$packet(r0, 0x0, 0x0) 19:39:27 executing program 0: setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:27 executing program 3: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x101400) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x1}) 19:39:27 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x5b, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x22, 0x3, 0x0) 19:39:27 executing program 2: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0xf, 0xffffffff, {0x54, 0x7fff, 0x6, {0x400, 0x2000}, {0x6, 0x6fb}, @cond=[{0x4, 0x99e1, 0x3f, 0xd3f, 0x8, 0x101}, {0x6, 0x1b7b, 0x9, 0x7, 0x3, 0x9}]}, {0x51, 0x5, 0x80, {0x3f, 0x4}, {0x4, 0xffff}, @const={0x7bc, {0x7, 0x388, 0x2, 0x7}}}}) socket$inet(0x2, 0x2, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x200) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x1}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x30) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0xfffb, "0e9257", 0xff, 0x84}) 19:39:27 executing program 4: sendmsg$rds(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:28 executing program 0: r0 = socket$inet(0x2, 0x0, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:28 executing program 1: r0 = socket(0x22, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) accept$packet(r0, 0x0, 0x0) 19:39:28 executing program 2: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0xf, 0xffffffff, {0x54, 0x7fff, 0x6, {0x400, 0x2000}, {0x6, 0x6fb}, @cond=[{0x4, 0x99e1, 0x3f, 0xd3f, 0x8, 0x101}, {0x6, 0x1b7b, 0x9, 0x7, 0x3, 0x9}]}, {0x51, 0x5, 0x80, {0x3f, 0x4}, {0x4, 0xffff}, @const={0x7bc, {0x7, 0x388, 0x2, 0x7}}}}) socket$inet(0x2, 0x2, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x200) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x1}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x30) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0xfffb, "0e9257", 0xff, 0x84}) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0xf, 0xffffffff, {0x54, 0x7fff, 0x6, {0x400, 0x2000}, {0x6, 0x6fb}, @cond=[{0x4, 0x99e1, 0x3f, 0xd3f, 0x8, 0x101}, {0x6, 0x1b7b, 0x9, 0x7, 0x3, 0x9}]}, {0x51, 0x5, 0x80, {0x3f, 0x4}, {0x4, 0xffff}, @const={0x7bc, {0x7, 0x388, 0x2, 0x7}}}}) (async) socket$inet(0x2, 0x2, 0x1) (async) syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x200) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x1}) (async) pipe2$watch_queue(&(0x7f0000000180), 0x80) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x30) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0xfffb, "0e9257", 0xff, 0x84}) (async) 19:39:28 executing program 3: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x101400) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x1}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) (async) socket(0x25, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x101400) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x1}) (async) 19:39:28 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x5b, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:28 executing program 4: sendmsg$rds(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:28 executing program 3: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x101400) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x1}) 19:39:28 executing program 1: r0 = socket(0x22, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) accept$packet(r0, 0x0, 0x0) socket(0x22, 0x3, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:28 executing program 2: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0xf, 0xffffffff, {0x54, 0x7fff, 0x6, {0x400, 0x2000}, {0x6, 0x6fb}, @cond=[{0x4, 0x99e1, 0x3f, 0xd3f, 0x8, 0x101}, {0x6, 0x1b7b, 0x9, 0x7, 0x3, 0x9}]}, {0x51, 0x5, 0x80, {0x3f, 0x4}, {0x4, 0xffff}, @const={0x7bc, {0x7, 0x388, 0x2, 0x7}}}}) (async, rerun: 32) socket$inet(0x2, 0x2, 0x1) (rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x200) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x1}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x30) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0xfffb, "0e9257", 0xff, 0x84}) 19:39:28 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x5b, 0x0) 19:39:28 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240400c0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0x9}}, 0x20) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) 19:39:28 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 19:39:28 executing program 0: r0 = socket$inet(0x2, 0x0, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:28 executing program 2: socket$inet(0x2, 0x2, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40181808}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fddbdf25250000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4080) 19:39:28 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240400c0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0x9}}, 0x20) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240400c0}, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0x9}}, 0x20) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) (async) 19:39:28 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 19:39:28 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept$packet(r1, 0x0, &(0x7f0000000040)) accept$packet(r0, 0x0, 0x0) recvfrom$packet(r0, &(0x7f0000000140)=""/85, 0x55, 0x0, 0x0, 0x0) 19:39:28 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 19:39:28 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240400c0}, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0x9}}, 0x20) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) 19:39:28 executing program 0: r0 = socket$inet(0x2, 0x0, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:28 executing program 2: socket$inet(0x2, 0x2, 0x1) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40181808}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fddbdf25250000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4080) 19:39:28 executing program 1: r0 = socket(0x22, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) accept$packet(r1, 0x0, &(0x7f0000000040)) accept$packet(r0, 0x0, 0x0) (async) recvfrom$packet(r0, &(0x7f0000000140)=""/85, 0x55, 0x0, 0x0, 0x0) 19:39:28 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) (async) 19:39:28 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) 19:39:28 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x2b, @private=0xa010100, 0x4e20, 0x2, 'lblc\x00', 0x20, 0x20, 0x78}, 0x2c) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0xa6, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)={0xd4, r2}) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x29, 0x20, 0x1, 0x0, 0x58, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x0, 0x4, 0xffff0f63}}) r3 = socket(0x25, 0x5, 0x0) getgroups(0x7, &(0x7f0000000180)=[0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r4) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x400) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) sendto$l2tp6(r3, &(0x7f00000000c0)="ec3adab627c041456f9badcd5d12e3ca5025481407ceaa8d5631d118e23af7d506723abc9287d9077207715c402b4a3feb4f771d6932b7e2c394f5465cb3b3af16ab02e566e20a6c68dd8592a276ca3901a94d321be0eacc92d1a68a9987b9d384754e0fdefa5ba2982dd8617ccdd47d04a33115", 0x74, 0x4004010, &(0x7f0000000140)={0xa, 0x0, 0x3, @private2, 0x1}, 0x20) 19:39:28 executing program 2: socket$inet(0x2, 0x2, 0x1) (async) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40181808}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fddbdf25250000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4080) 19:39:28 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept$packet(r1, 0x0, &(0x7f0000000040)) accept$packet(r0, 0x0, 0x0) recvfrom$packet(r0, &(0x7f0000000140)=""/85, 0x55, 0x0, 0x0, 0x0) socket(0x22, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) accept$packet(r1, 0x0, &(0x7f0000000040)) (async) accept$packet(r0, 0x0, 0x0) (async) recvfrom$packet(r0, &(0x7f0000000140)=""/85, 0x55, 0x0, 0x0, 0x0) (async) 19:39:28 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:28 executing program 4: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x2b, @private=0xa010100, 0x4e20, 0x2, 'lblc\x00', 0x20, 0x20, 0x78}, 0x2c) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0xa6, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)={0xd4, r2}) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x29, 0x20, 0x1, 0x0, 0x58, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x0, 0x4, 0xffff0f63}}) (async) r3 = socket(0x25, 0x5, 0x0) (async) getgroups(0x7, &(0x7f0000000180)=[0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r4) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x400) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) sendto$l2tp6(r3, &(0x7f00000000c0)="ec3adab627c041456f9badcd5d12e3ca5025481407ceaa8d5631d118e23af7d506723abc9287d9077207715c402b4a3feb4f771d6932b7e2c394f5465cb3b3af16ab02e566e20a6c68dd8592a276ca3901a94d321be0eacc92d1a68a9987b9d384754e0fdefa5ba2982dd8617ccdd47d04a33115", 0x74, 0x4004010, &(0x7f0000000140)={0xa, 0x0, 0x3, @private2, 0x1}, 0x20) 19:39:28 executing program 2: socket$inet(0x2, 0x2, 0x1) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2204a810) pipe2$watch_queue(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x101}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0xecf4c4ecddc80e0}, 0x20000000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0x2, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc}, 0x24}, 0x1, 0x0, 0x0, 0x4044095}, 0x44080) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020026bd7000fddbdf250100000008001900e0000001050007000200000008001900ac1414aa0800003d080019000a010101000000000100000000000080"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008001) 19:39:28 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:28 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8e99989e86df25b6) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) accept$packet(r0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)) recvfrom$packet(r0, &(0x7f0000000280)=""/85, 0x55, 0x10100, 0x0, 0x0) 19:39:28 executing program 0: socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:28 executing program 4: r0 = socket(0x25, 0x5, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x2b, @private=0xa010100, 0x4e20, 0x2, 'lblc\x00', 0x20, 0x20, 0x78}, 0x2c) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0xa6, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)={0xd4, r2}) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:28 executing program 2: socket$inet(0x2, 0x2, 0x1) (async, rerun: 32) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async, rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2204a810) (async) pipe2$watch_queue(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x101}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0xecf4c4ecddc80e0}, 0x20000000) (async, rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0x2, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc}, 0x24}, 0x1, 0x0, 0x0, 0x4044095}, 0x44080) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020026bd7000fddbdf250100000008001900e0000001050007000200000008001900ac1414aa0800003d080019000a010101000000000100000000000080"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008001) 19:39:28 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) [ 1309.410335] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 19:39:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x29, 0x20, 0x1, 0x0, 0x58, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x0, 0x4, 0xffff0f63}}) r3 = socket(0x25, 0x5, 0x0) getgroups(0x7, &(0x7f0000000180)=[0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r4) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x400) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) sendto$l2tp6(r3, &(0x7f00000000c0)="ec3adab627c041456f9badcd5d12e3ca5025481407ceaa8d5631d118e23af7d506723abc9287d9077207715c402b4a3feb4f771d6932b7e2c394f5465cb3b3af16ab02e566e20a6c68dd8592a276ca3901a94d321be0eacc92d1a68a9987b9d384754e0fdefa5ba2982dd8617ccdd47d04a33115", 0x74, 0x4004010, &(0x7f0000000140)={0xa, 0x0, 0x3, @private2, 0x1}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x29, 0x20, 0x1, 0x0, 0x58, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x0, 0x4, 0xffff0f63}}) (async) socket(0x25, 0x5, 0x0) (async) getgroups(0x7, &(0x7f0000000180)=[0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) (async) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r4) (async) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x400) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) sendto$l2tp6(r3, &(0x7f00000000c0)="ec3adab627c041456f9badcd5d12e3ca5025481407ceaa8d5631d118e23af7d506723abc9287d9077207715c402b4a3feb4f771d6932b7e2c394f5465cb3b3af16ab02e566e20a6c68dd8592a276ca3901a94d321be0eacc92d1a68a9987b9d384754e0fdefa5ba2982dd8617ccdd47d04a33115", 0x74, 0x4004010, &(0x7f0000000140)={0xa, 0x0, 0x3, @private2, 0x1}, 0x20) (async) 19:39:28 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8e99989e86df25b6) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) accept$packet(r0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)) recvfrom$packet(r0, &(0x7f0000000280)=""/85, 0x55, 0x10100, 0x0, 0x0) socket(0x22, 0x3, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8e99989e86df25b6) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) accept$packet(r0, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)) (async) recvfrom$packet(r0, &(0x7f0000000280)=""/85, 0x55, 0x10100, 0x0, 0x0) (async) 19:39:28 executing program 2: socket$inet(0x2, 0x2, 0x1) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2204a810) (async) pipe2$watch_queue(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x101}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0xecf4c4ecddc80e0}, 0x20000000) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0x2, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc}, 0x24}, 0x1, 0x0, 0x0, 0x4044095}, 0x44080) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020026bd7000fddbdf250100000008001900e0000001050007000200000008001900ac1414aa0800003d080019000a010101000000000100000000000080"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008001) 19:39:28 executing program 0: socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:28 executing program 4: r0 = socket(0x25, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:28 executing program 5: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)) r1 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) 19:39:28 executing program 1: r0 = socket(0x22, 0x3, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8e99989e86df25b6) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) accept$packet(r0, 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)) (async) recvfrom$packet(r0, &(0x7f0000000280)=""/85, 0x55, 0x10100, 0x0, 0x0) 19:39:28 executing program 4: r0 = socket(0x25, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:28 executing program 0: socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0x34, 0x1, 0x28}, 0x2c) 19:39:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)) r1 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) 19:39:28 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:28 executing program 4: r0 = socket(0x25, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0) 19:39:28 executing program 2: socket$inet(0x2, 0x3, 0x1) 19:39:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)) (async) r1 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) 19:39:28 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000003c0)=@chain) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f00000003c0)=@chain) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f00000003c0)=@chain) r4 = add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="4c401f079ee280b0b592c349ff8f54e985ac25cd35e99ea6a9f78d2935618c025429e29f35465db7926f673ee2ea18fcb56624a710b4e22d887b16e777f0c82abb642f5f09c740f865e611d8cda51f9055c07c5bcde5f3162b6b7001c5669fab39213e16cc1bac8e2626687516252819f445744d4411ded6676117d23401a0451fa8903f8ed379918eb165d77c4bd0af1e1ccd4ffe9a264169181456e1e2558aa8885ddccf32bcc1134fb6c5a7e788eefe79af49f055a9a51116bece459c07eb8dd5d8b8fadad8451ac1864b17c7089ac9d0bd6967c0ec8b7bdc5b20615dad7992a33d", 0xe3, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x0) r5 = socket(0x22, 0x3, 0x0) accept$packet(r5, 0x0, 0x0) 19:39:28 executing program 4: sendmsg$rds(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:28 executing program 2: socket$inet(0x2, 0x3, 0x1) socket$inet(0x2, 0x3, 0x1) (async) 19:39:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)) r1 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) 19:39:28 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000003c0)=@chain) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f00000003c0)=@chain) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1) (async) r3 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f00000003c0)=@chain) (async) r4 = add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="4c401f079ee280b0b592c349ff8f54e985ac25cd35e99ea6a9f78d2935618c025429e29f35465db7926f673ee2ea18fcb56624a710b4e22d887b16e777f0c82abb642f5f09c740f865e611d8cda51f9055c07c5bcde5f3162b6b7001c5669fab39213e16cc1bac8e2626687516252819f445744d4411ded6676117d23401a0451fa8903f8ed379918eb165d77c4bd0af1e1ccd4ffe9a264169181456e1e2558aa8885ddccf32bcc1134fb6c5a7e788eefe79af49f055a9a51116bece459c07eb8dd5d8b8fadad8451ac1864b17c7089ac9d0bd6967c0ec8b7bdc5b20615dad7992a33d", 0xe3, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x0) r5 = socket(0x22, 0x3, 0x0) accept$packet(r5, 0x0, 0x0) 19:39:28 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:28 executing program 3: r0 = socket(0x5, 0xa, 0x9) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:28 executing program 2: socket$inet(0x2, 0x3, 0x1) 19:39:28 executing program 0: socket$inet(0x2, 0x2, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40181808}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fddbdf25250000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4080) 19:39:28 executing program 4: sendmsg$rds(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:28 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000003c0)=@chain) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f00000003c0)=@chain) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1) (async) r3 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f00000003c0)=@chain) r4 = add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="4c401f079ee280b0b592c349ff8f54e985ac25cd35e99ea6a9f78d2935618c025429e29f35465db7926f673ee2ea18fcb56624a710b4e22d887b16e777f0c82abb642f5f09c740f865e611d8cda51f9055c07c5bcde5f3162b6b7001c5669fab39213e16cc1bac8e2626687516252819f445744d4411ded6676117d23401a0451fa8903f8ed379918eb165d77c4bd0af1e1ccd4ffe9a264169181456e1e2558aa8885ddccf32bcc1134fb6c5a7e788eefe79af49f055a9a51116bece459c07eb8dd5d8b8fadad8451ac1864b17c7089ac9d0bd6967c0ec8b7bdc5b20615dad7992a33d", 0xe3, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x0) (async) r5 = socket(0x22, 0x3, 0x0) accept$packet(r5, 0x0, 0x0) 19:39:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x800}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x61aa}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$inet(0x2, 0x2, 0x1) 19:39:28 executing program 3: r0 = socket(0x5, 0xa, 0x9) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:28 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:28 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x5b, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x22, 0x3, 0x0) 19:39:28 executing program 4: sendmsg$rds(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:28 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x800}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x61aa}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) socket$inet(0x2, 0x2, 0x1) 19:39:28 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd09}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 19:39:28 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x5b, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x22, 0x3, 0x0) 19:39:28 executing program 4: r0 = socket(0x25, 0x5, 0x0) socket$packet(0x11, 0x1, 0x300) socket(0x22, 0x6, 0x1) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42401, 0x0) sendmsg$rds(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/14, 0xe}], 0x5, &(0x7f0000000400)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000004c0)=""/134, 0x86}, &(0x7f00000003c0), 0x10}}], 0x30}, 0x4004800) 19:39:28 executing program 3: r0 = socket(0x5, 0xa, 0x9) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:28 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd09}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd09}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) 19:39:28 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:39:28 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x5b, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x22, 0x3, 0x0) 19:39:28 executing program 4: r0 = socket(0x25, 0x5, 0x0) socket$packet(0x11, 0x1, 0x300) socket(0x22, 0x6, 0x1) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42401, 0x0) sendmsg$rds(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/14, 0xe}], 0x5, &(0x7f0000000400)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000004c0)=""/134, 0x86}, &(0x7f00000003c0), 0x10}}], 0x30}, 0x4004800) socket(0x25, 0x5, 0x0) (async) socket$packet(0x11, 0x1, 0x300) (async) socket(0x22, 0x6, 0x1) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42401, 0x0) (async) sendmsg$rds(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/14, 0xe}], 0x5, &(0x7f0000000400)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000004c0)=""/134, 0x86}, &(0x7f00000003c0), 0x10}}], 0x30}, 0x4004800) (async) 19:39:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x800}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x61aa}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) socket$inet(0x2, 0x2, 0x1) 19:39:28 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x5b, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:28 executing program 4: r0 = socket(0x25, 0x5, 0x0) (async) socket$packet(0x11, 0x1, 0x300) (async) socket(0x22, 0x6, 0x1) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42401, 0x0) sendmsg$rds(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/14, 0xe}], 0x5, &(0x7f0000000400)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000004c0)=""/134, 0x86}, &(0x7f00000003c0), 0x10}}], 0x30}, 0x4004800) 19:39:28 executing program 3: recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x3, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000100)) r2 = accept$packet(r0, &(0x7f0000000200), &(0x7f0000000240)=0x14) accept4$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x400) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:28 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:39:28 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd09}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd09}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) 19:39:29 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x5b, 0x0) 19:39:29 executing program 2: r0 = socket(0x1d, 0x1, 0x4) setsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)="937da01cc9eeddc72b0c46a45c8b51c37451703d3f1972fd82fbeee885d71d1545ccc8f2ce4be2806037613f6ad5991e073f7bd0da330892d9133f28ed229f7a31599ccea3083c512ca966a818220503b30eb9fafb9dde40c507681dbf9330b2a9e93a6436cb5a27a7ef16ef7b80e6bad0956d28f436fc8689767e935be0c918949ff5e9c1358b87471f0ba7c3879cf98d8db9970cff13a2ab180a0f5376e6fee5ec5e62ebf932b259b965bdec1f3112bd62c0e33c4cd0aa597bdfffb5c2cb904ff43907cd8add22c15fc13f57ac6ab7ca0163f3f2c9a8de666bedaec20833b27a15ff4df6bace26cc135622c9118691a3e666c14edacef53228410169bcb28133356df0992d72e40edb17abc8403fb5ebc775a4d60832d6c17f031a7bdd6a4716ab56fc295e2538ec047eeebb210bc361ab6c2bcab92cf79f48cc018fe997b1621c198c418f190a1e5948ab5fcb9cc60e25dd28cf73acec89c9fa5ea3c4423e034072bbe097008e0a2af2046f29bcd86393c5fc275a6456e4a180c135d062bf2f343548f4f70f5a231b9565c315c570905a662e87aa48219a9459f7aedc8a35177e0c7040ac8533fb549bca3bec95cb6e06df3f54889547fa464c843d2f310b267aa6d8081c02bba95f942e7dcc47611c36950e7b82745a6d71d289fe897d4d7cf972cb912a3e010bafc43c642dbfce07777383d6e6266c52c6d08bb0998bd2e9d77b547dd9cb0990dccca381daa19d88839402273d2463161d834ebe33e8dabdc9358ed659bcb4f82c18eb04799cf00aacf00964e57fb2ace7fdb7fa32538639480bbd435653cc5396685b395111959f3dba8f098463eabbd509b3b19b0a2f43af42a717ad3bd7f8d06d56eaf487b68f737db1d55294828af81377db8c3e01a52c8593480adbc58d46e0ea97cfee6affaa04107cfd8ae86e62438387638ff7c92c280a37c3fc75ca013d7119b4df3d44d079080e1fed4b3a64725a5d6c9e3fb4a86a160baeb03c361035c70523e901a094a39a0f05a38b3227f3ef0f46e4db01121f56430709bb79791896119a820ada36917ecaa4cdea1a16be17b24b2ba4bb65da5e7c09998026b784bdabe1ab4834a9bbb7a14d8325846fdb82664c6bf191c28a628d045fe6c3d85cdbfa28eab3dc21bc28587f382320e5dadbf3372b170609f9e7c4330c4bc5020ac7c881c3f66c9f0a5a98124b86f49598d118ecd345cb0d2e54bd7c6872c5d381d2f4f151f5f7b95319af4983fd56fceae834543c9d62e670a610fa8b808608e7ce98e74fa0ac1158504d74017a0e59476fd32e8051861837469f9607a941b60ea34f23299d1ca655f87de3af853ec55fe0355bf3e37db78c599f0eadf8762c68e1841a4402d379a59270700494deb7d16b9768e31935d6dc98921e5fc7a6c88cb705d5b674366840a7018b29a34fd270c7739bd09a89e7a7d12b50d7c83eb5e1fa0348169aab9aa52ee6115093c6723bc1ecdcedd2c3db82c4d4a3092c84199e584eaeae872727d006e4015ecd5795615b64777667ad4fec4e53968143d2e4213f08b205338f798cd0ceeba05e11968eba605454accde7f38733641cdc62c1381aacb9895bc8600f5591e1df7f8f48213f05ddcc0ebf2d472a726cfe7c296fe7ee61d145464953efd58c8fac376884bfe100eb6e88e8b8cf9ba6a041551176b580c1e5c4208e41a841cb0380c27f4b6ac03e59536c4c5f4e6ca6b8bba855ab1b4ad4bc128257fb6862ac339037f189a3446dc31cea2e580ded9c4b3692dabea1683a86d2e2c43ae659951c06cd2aea4b141a94cc80a15e72786afd00f3a58c44897c53d9146b03efb5f0199c122cb0103f66a287ca4316b1b0dd974e87a3fc3a41e5d6de8e66667591c9772e3c547809ad9f328ab099477e140dedbcd8466f2c72f5e782519d3ecdb7f220819b5a91fcd48b3457c0986ad709d9686bc6159553399c0c9c8956899f94d5b689a04b3e439f6617ab1a1d52c39c5af0c7a257ec241b68ef90a8307b569fa9aa8f1e61044bdb258de84b4f433ab40898da723a724c8863c4e1db27f31267adf22636eaaa48cd6c942a8f2dbd9565bd33754695001d5eb1904f4b26a078fdb629b512a43f94509e105a7468c7a2785c37b41740d8583c2bbd64c8fc87a85a629ec644ec212d7497bad758fafb8186f09dc64884388d9a384332e927f657ef5c1a833fb9056d7ae56f3657cbf75c8ec39e11123e9592955aaba55a44e8a82120e22b2c3e7567d2a9c8ef136443fe07b0293ed504e1300e8256a7c018daef7fa037910cabb7379f0ec5810c384410f807cae9bf513c8c001ca1cf025b3d99be1a29fc3139515740158ade5f64d94e7338dee30ebae996924d159fd341ee58a79eb9be1f38b9478893de563ef81cc9a9362aee62028343538e2bc077c5dc13089fa8f7ec09c82dacdcb871afc31b7a45ccc9ce89f823c4f587f5f0f2f03d1226479cb3058fb740223c7d9f0e796dcaeb69b4a5de828c2ef621e356a3c7589c2f08096e1c9bffba59289a454d81cb224ffba4f3d8baa1a1ef595bdb6699a33c4c89705f4594eef9ccf48bb07f487563fda718c2d8ead54f4137f8f18e52345a08c253d6039ce2d9ff597696d4b352d6446d577405eadfdea1587baab34e4b9d9323b7f768c04ff54aa34fd6491f8a52597da12a3699ef41b3f2e7daed0f28f90011a4dc1670627bf3a2a46c12180cee765569b0a02e74923c16f31845c5d96b17ea671a3787c39736c5d7c5381bbf0266955b91058f642c3d6f1630f47cc5d4bcc9b7c649f4fe57ce88e5ec59e29de5ed700a6f0c815d01cab97841c73962b04ffc556a19c73cc22b0c330f0d44b3da6d170f3f0af2b3d2a911cc26cf8acf0d7495f9d207e2cd685384092fa6e7020ca5c8e27ba88fe7881e1d0a756d409333d04122dade82036f0d8384ea08232e08fa80feb7f546b14dab5c43d7d71fc17219275d2a67187f25ed52916d5a56f5adb640776b16dbf41f04bcbd3e925b5bad39e2339b60261854755c30d4a5afcfd18d30ea007ba14dea2d8ed538fd407679ae7401e0e33b06692622293ea6e56cb7bc9f23b61bab02f7d59f48ffb1fbc02e0f598195ef1595463c0406077d89c4e01b40293c1f19b7d21a8c6d97dd130a3fa29d26673cbcc6043a03f12269388cbedc87b377178581ff747058e847967b5c00176d3ca85dd99d165498d8a5a087d5e82ee06325035dce1040ac0651fb9d5a7826d52e78c43a3c6687680b1fec5478449f845cd58b2621f77f4581f483fb0bab4dbfcf8470bc9464d68eba3889bad9ff9a10abd20246f8f7037376db4636554f97330446ad87d38929fc525045e9acdccecd3cadf4467546d1a93535b3f224b5bfae940616964e479e020abf5e7eaba8ddd60b5602c807aed037976d48ec1c5afe902f946a9a1adfb93f558073a47321c637dacbb88b48a01e14b791db3f747910762752fe8402504b351cb203d2059c66cd8680cef4379eb7afb955c9265704d23891fd6f0f01756963b6b6686663bd43c85d012cfd79f622dede3191328dd08064c9e7790175a118dd6a005484f1b269c80d6a1cf015b40a6ddd9e7e0c9fc04f4917ebe89a9494e806e52111fe04efd3b8dabdddf077ac7cb85d87e4c01142fc65cd50d4e3f4aadd6b9e639169e87cb6bdcb50e272874ddd1756f39a390ad655052a720ec571052a1381bb8e20a46d5ed63ef6fa8030e55650ccdc20525e42d5a0d51e7a5d9afa4f004f1c37bf98ec983b5723ee9eb46c5114704a53914eeccab8b48e5971d68b32bb40bb9c51e69c59b5867545b746772391167442e5be9b7ff19ff24ade789b318c6e0d8688f5b4f17b8d02471e89bf0e8ac7780eb00be8cf012ead99226993cf8b5568259ab388eed2b3334b5a3d904ba160f72de214d8be23ac990895249b1f6185c39d48ef2df4368074ea71d714ea188e66c183934a33ffb722ff622c1aba11ea67625f27e0ea8c6831a2bbb5200180e4f82b50a0a1163bf59784e12b7b9d9e219614a39d98f5737c53d2d3576502c5b335deed6affe9f26529297f88dbe5b6bcf77b702138b6b92a2dd0ddd5b2b130647d59e998cb438d4f023036e6b74e616fb8309897fdc6317660459c541a3fd1f5d317426be6ab67c0c7e082038afa0c4cf9052d91e9fd758bb6d45268d9ffa89686f2f2a07dd05efc33fc18416f7375e25b5eeec18c68bb9f9339c0244a4466c12200aa3eb5638582a399956628c1184a25f6b958e9bedb583076a1d03acb66f99e5442f5b2191e671ece6539f6cfa022d49ba104db0f98ee6524513643b0d7f2600312c200a31b897ff8edc2234907ca9138c61ffa18ba7f85163601e4ca7367b38dba64fa187b89d740a3301e83b8374c5e8f0de36a743d2194fdd74d5a7cd0b3c8a1731dfdbe5bf655477570426dc508b9d0a0d4c7f65c821a3f349348c3543b031a317082cea413c86471bdb99651757b5dd86b831e4b2cf2a8e26370abe8547941db936294824a443a463185dd34873c00be21a377b8a23967d0e0a251ffe7320f04e6ee27e8997b455792ed816425a69660ff540e55f7b32cfe97bf3f5202aebc30972d3dda1af1d4ba744a9383f9e19897d6f1baa970424e01b83c31639eb745a623a17369b1a24c2c03f60c2196ef3ade4f689f93acd614dd5c88e51564b9593c83cdae8a39439dec68cf1fe479e8f8c7b47c311ed09d82acd0ae117fd94143aeeffb466719a880cad1701fdc8d4e414352cdccafd4317d347cc0e4af642f7367cb07170d45b7b999f7aedf406dfbb7ce68547d3345672c5b5f88d0d3868c4d1bd3d37f195ce54659eea5332ab79a2bfa1bfdea0046ce7e84723d9d8f7dc61bffefa779b5cf0d1e2480019141fdf716dad006dfe8551e9b9f49f639121375a600a81309a0e222c243b5965f487a585348ba9f1955b87651f809c351febd0e3f61a38ca311862d9ae44cf92ff8829a45b9f7c9a39e1fb645eef94540679a3b4d7e423db1828af345d8fcc4882b68cc492fa3992d2a3e040a262cab8d92138990b8afad65d390c5178350d26a4073537be6a53e6c42c4f967e730cf9041e52427ae2a3afed5b76603aa6ee9f83775939a2d6dcb5377ddba79bb953769bd31cf43f35c7034ea7d3a6b74031ce2b84b05334f7763f67c3197eefc49cea13f4380beb87283ddfc2c322950a56653610b4dab47348d53043092e72a23620ce7b872ff25129786c240eaff9c082a74eaee0cd3ff6963e49a4acce56b7efdd2440a9e6b34d78f61d53d9c930ce1b6bc41cce4157bc89e708bba2156568b79eb9a4c9489c4ca89432d1e1ce80fb1a015c7791ae7abe5c1d7d0042e10fd54f8e28372c475d81c8c4ceee259fd7774d77ac7a39bfa6e22b9f654bcf2c3267b4ec3705d78d02f1ecb81c6a6845b9d13ad0fb239aae98f0cbe025c86bdc3ae4390246cee30831313e218863498b4dc32c4538a237dbbfd9fe5e46f170568bbe69f4c97efbb3abecfe03505192ae67cb1a15900ac6bae935bfc04e1c09117c7fce8314772a542b61c26ee2fc0ce8457cc68b31a283c477234a3a1ae9aaedefafeb7e62da34ffc9b437af56cacb05db89a433f9935f9b552f2de465af4be1e7b5ceddad91961749f0780702a520366dd1a5d3d4040c16dd38854c3a73d6af8f395b28a43cd1affe84e47b7cc71017b45fbbfa3a235778fa5c1b58989fb9ca15a4d4f2f928d9519d6525e77a7de225390ffe639df7a899e46dffb74a10d7ef8476eade98d3c4a9ba2822b5ad8767f3679bcda963ec8", 0x1000) socket$inet(0x2, 0x1, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0xfe396694ecf7fdc4, @remote, 0x4e24, 0x2, 'wlc\x00', 0x1c, 0x10000, 0x7a}, 0x2c) 19:39:29 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$packet(r0, 0x0, 0x0) 19:39:29 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:39:29 executing program 3: recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x3, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000100)) r2 = accept$packet(r0, &(0x7f0000000200), &(0x7f0000000240)=0x14) accept4$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x400) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x3, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) socket(0x25, 0x5, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000100)) (async) accept$packet(r0, &(0x7f0000000200), &(0x7f0000000240)=0x14) (async) accept4$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x400) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) 19:39:29 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x40048085) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x27}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 19:39:29 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 19:39:29 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$packet(r0, 0x0, 0x0) [ 1310.094995] can: request_module (can-proto-4) failed. 19:39:29 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x40048085) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x27}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x40048085) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x27}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) 19:39:29 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (fail_nth: 1) 19:39:29 executing program 3: recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x3, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000100)) r2 = accept$packet(r0, &(0x7f0000000200), &(0x7f0000000240)=0x14) accept4$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x400) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x3, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) socket(0x25, 0x5, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000100)) (async) accept$packet(r0, &(0x7f0000000200), &(0x7f0000000240)=0x14) (async) accept4$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x400) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) 19:39:29 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) 19:39:29 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$packet(r0, 0x0, 0x0) 19:39:29 executing program 2: r0 = socket(0x1d, 0x1, 0x4) setsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)="937da01cc9eeddc72b0c46a45c8b51c37451703d3f1972fd82fbeee885d71d1545ccc8f2ce4be2806037613f6ad5991e073f7bd0da330892d9133f28ed229f7a31599ccea3083c512ca966a818220503b30eb9fafb9dde40c507681dbf9330b2a9e93a6436cb5a27a7ef16ef7b80e6bad0956d28f436fc8689767e935be0c918949ff5e9c1358b87471f0ba7c3879cf98d8db9970cff13a2ab180a0f5376e6fee5ec5e62ebf932b259b965bdec1f3112bd62c0e33c4cd0aa597bdfffb5c2cb904ff43907cd8add22c15fc13f57ac6ab7ca0163f3f2c9a8de666bedaec20833b27a15ff4df6bace26cc135622c9118691a3e666c14edacef53228410169bcb28133356df0992d72e40edb17abc8403fb5ebc775a4d60832d6c17f031a7bdd6a4716ab56fc295e2538ec047eeebb210bc361ab6c2bcab92cf79f48cc018fe997b1621c198c418f190a1e5948ab5fcb9cc60e25dd28cf73acec89c9fa5ea3c4423e034072bbe097008e0a2af2046f29bcd86393c5fc275a6456e4a180c135d062bf2f343548f4f70f5a231b9565c315c570905a662e87aa48219a9459f7aedc8a35177e0c7040ac8533fb549bca3bec95cb6e06df3f54889547fa464c843d2f310b267aa6d8081c02bba95f942e7dcc47611c36950e7b82745a6d71d289fe897d4d7cf972cb912a3e010bafc43c642dbfce07777383d6e6266c52c6d08bb0998bd2e9d77b547dd9cb0990dccca381daa19d88839402273d2463161d834ebe33e8dabdc9358ed659bcb4f82c18eb04799cf00aacf00964e57fb2ace7fdb7fa32538639480bbd435653cc5396685b395111959f3dba8f098463eabbd509b3b19b0a2f43af42a717ad3bd7f8d06d56eaf487b68f737db1d55294828af81377db8c3e01a52c8593480adbc58d46e0ea97cfee6affaa04107cfd8ae86e62438387638ff7c92c280a37c3fc75ca013d7119b4df3d44d079080e1fed4b3a64725a5d6c9e3fb4a86a160baeb03c361035c70523e901a094a39a0f05a38b3227f3ef0f46e4db01121f56430709bb79791896119a820ada36917ecaa4cdea1a16be17b24b2ba4bb65da5e7c09998026b784bdabe1ab4834a9bbb7a14d8325846fdb82664c6bf191c28a628d045fe6c3d85cdbfa28eab3dc21bc28587f382320e5dadbf3372b170609f9e7c4330c4bc5020ac7c881c3f66c9f0a5a98124b86f49598d118ecd345cb0d2e54bd7c6872c5d381d2f4f151f5f7b95319af4983fd56fceae834543c9d62e670a610fa8b808608e7ce98e74fa0ac1158504d74017a0e59476fd32e8051861837469f9607a941b60ea34f23299d1ca655f87de3af853ec55fe0355bf3e37db78c599f0eadf8762c68e1841a4402d379a59270700494deb7d16b9768e31935d6dc98921e5fc7a6c88cb705d5b674366840a7018b29a34fd270c7739bd09a89e7a7d12b50d7c83eb5e1fa0348169aab9aa52ee6115093c6723bc1ecdcedd2c3db82c4d4a3092c84199e584eaeae872727d006e4015ecd5795615b64777667ad4fec4e53968143d2e4213f08b205338f798cd0ceeba05e11968eba605454accde7f38733641cdc62c1381aacb9895bc8600f5591e1df7f8f48213f05ddcc0ebf2d472a726cfe7c296fe7ee61d145464953efd58c8fac376884bfe100eb6e88e8b8cf9ba6a041551176b580c1e5c4208e41a841cb0380c27f4b6ac03e59536c4c5f4e6ca6b8bba855ab1b4ad4bc128257fb6862ac339037f189a3446dc31cea2e580ded9c4b3692dabea1683a86d2e2c43ae659951c06cd2aea4b141a94cc80a15e72786afd00f3a58c44897c53d9146b03efb5f0199c122cb0103f66a287ca4316b1b0dd974e87a3fc3a41e5d6de8e66667591c9772e3c547809ad9f328ab099477e140dedbcd8466f2c72f5e782519d3ecdb7f220819b5a91fcd48b3457c0986ad709d9686bc6159553399c0c9c8956899f94d5b689a04b3e439f6617ab1a1d52c39c5af0c7a257ec241b68ef90a8307b569fa9aa8f1e61044bdb258de84b4f433ab40898da723a724c8863c4e1db27f31267adf22636eaaa48cd6c942a8f2dbd9565bd33754695001d5eb1904f4b26a078fdb629b512a43f94509e105a7468c7a2785c37b41740d8583c2bbd64c8fc87a85a629ec644ec212d7497bad758fafb8186f09dc64884388d9a384332e927f657ef5c1a833fb9056d7ae56f3657cbf75c8ec39e11123e9592955aaba55a44e8a82120e22b2c3e7567d2a9c8ef136443fe07b0293ed504e1300e8256a7c018daef7fa037910cabb7379f0ec5810c384410f807cae9bf513c8c001ca1cf025b3d99be1a29fc3139515740158ade5f64d94e7338dee30ebae996924d159fd341ee58a79eb9be1f38b9478893de563ef81cc9a9362aee62028343538e2bc077c5dc13089fa8f7ec09c82dacdcb871afc31b7a45ccc9ce89f823c4f587f5f0f2f03d1226479cb3058fb740223c7d9f0e796dcaeb69b4a5de828c2ef621e356a3c7589c2f08096e1c9bffba59289a454d81cb224ffba4f3d8baa1a1ef595bdb6699a33c4c89705f4594eef9ccf48bb07f487563fda718c2d8ead54f4137f8f18e52345a08c253d6039ce2d9ff597696d4b352d6446d577405eadfdea1587baab34e4b9d9323b7f768c04ff54aa34fd6491f8a52597da12a3699ef41b3f2e7daed0f28f90011a4dc1670627bf3a2a46c12180cee765569b0a02e74923c16f31845c5d96b17ea671a3787c39736c5d7c5381bbf0266955b91058f642c3d6f1630f47cc5d4bcc9b7c649f4fe57ce88e5ec59e29de5ed700a6f0c815d01cab97841c73962b04ffc556a19c73cc22b0c330f0d44b3da6d170f3f0af2b3d2a911cc26cf8acf0d7495f9d207e2cd685384092fa6e7020ca5c8e27ba88fe7881e1d0a756d409333d04122dade82036f0d8384ea08232e08fa80feb7f546b14dab5c43d7d71fc17219275d2a67187f25ed52916d5a56f5adb640776b16dbf41f04bcbd3e925b5bad39e2339b60261854755c30d4a5afcfd18d30ea007ba14dea2d8ed538fd407679ae7401e0e33b06692622293ea6e56cb7bc9f23b61bab02f7d59f48ffb1fbc02e0f598195ef1595463c0406077d89c4e01b40293c1f19b7d21a8c6d97dd130a3fa29d26673cbcc6043a03f12269388cbedc87b377178581ff747058e847967b5c00176d3ca85dd99d165498d8a5a087d5e82ee06325035dce1040ac0651fb9d5a7826d52e78c43a3c6687680b1fec5478449f845cd58b2621f77f4581f483fb0bab4dbfcf8470bc9464d68eba3889bad9ff9a10abd20246f8f7037376db4636554f97330446ad87d38929fc525045e9acdccecd3cadf4467546d1a93535b3f224b5bfae940616964e479e020abf5e7eaba8ddd60b5602c807aed037976d48ec1c5afe902f946a9a1adfb93f558073a47321c637dacbb88b48a01e14b791db3f747910762752fe8402504b351cb203d2059c66cd8680cef4379eb7afb955c9265704d23891fd6f0f01756963b6b6686663bd43c85d012cfd79f622dede3191328dd08064c9e7790175a118dd6a005484f1b269c80d6a1cf015b40a6ddd9e7e0c9fc04f4917ebe89a9494e806e52111fe04efd3b8dabdddf077ac7cb85d87e4c01142fc65cd50d4e3f4aadd6b9e639169e87cb6bdcb50e272874ddd1756f39a390ad655052a720ec571052a1381bb8e20a46d5ed63ef6fa8030e55650ccdc20525e42d5a0d51e7a5d9afa4f004f1c37bf98ec983b5723ee9eb46c5114704a53914eeccab8b48e5971d68b32bb40bb9c51e69c59b5867545b746772391167442e5be9b7ff19ff24ade789b318c6e0d8688f5b4f17b8d02471e89bf0e8ac7780eb00be8cf012ead99226993cf8b5568259ab388eed2b3334b5a3d904ba160f72de214d8be23ac990895249b1f6185c39d48ef2df4368074ea71d714ea188e66c183934a33ffb722ff622c1aba11ea67625f27e0ea8c6831a2bbb5200180e4f82b50a0a1163bf59784e12b7b9d9e219614a39d98f5737c53d2d3576502c5b335deed6affe9f26529297f88dbe5b6bcf77b702138b6b92a2dd0ddd5b2b130647d59e998cb438d4f023036e6b74e616fb8309897fdc6317660459c541a3fd1f5d317426be6ab67c0c7e082038afa0c4cf9052d91e9fd758bb6d45268d9ffa89686f2f2a07dd05efc33fc18416f7375e25b5eeec18c68bb9f9339c0244a4466c12200aa3eb5638582a399956628c1184a25f6b958e9bedb583076a1d03acb66f99e5442f5b2191e671ece6539f6cfa022d49ba104db0f98ee6524513643b0d7f2600312c200a31b897ff8edc2234907ca9138c61ffa18ba7f85163601e4ca7367b38dba64fa187b89d740a3301e83b8374c5e8f0de36a743d2194fdd74d5a7cd0b3c8a1731dfdbe5bf655477570426dc508b9d0a0d4c7f65c821a3f349348c3543b031a317082cea413c86471bdb99651757b5dd86b831e4b2cf2a8e26370abe8547941db936294824a443a463185dd34873c00be21a377b8a23967d0e0a251ffe7320f04e6ee27e8997b455792ed816425a69660ff540e55f7b32cfe97bf3f5202aebc30972d3dda1af1d4ba744a9383f9e19897d6f1baa970424e01b83c31639eb745a623a17369b1a24c2c03f60c2196ef3ade4f689f93acd614dd5c88e51564b9593c83cdae8a39439dec68cf1fe479e8f8c7b47c311ed09d82acd0ae117fd94143aeeffb466719a880cad1701fdc8d4e414352cdccafd4317d347cc0e4af642f7367cb07170d45b7b999f7aedf406dfbb7ce68547d3345672c5b5f88d0d3868c4d1bd3d37f195ce54659eea5332ab79a2bfa1bfdea0046ce7e84723d9d8f7dc61bffefa779b5cf0d1e2480019141fdf716dad006dfe8551e9b9f49f639121375a600a81309a0e222c243b5965f487a585348ba9f1955b87651f809c351febd0e3f61a38ca311862d9ae44cf92ff8829a45b9f7c9a39e1fb645eef94540679a3b4d7e423db1828af345d8fcc4882b68cc492fa3992d2a3e040a262cab8d92138990b8afad65d390c5178350d26a4073537be6a53e6c42c4f967e730cf9041e52427ae2a3afed5b76603aa6ee9f83775939a2d6dcb5377ddba79bb953769bd31cf43f35c7034ea7d3a6b74031ce2b84b05334f7763f67c3197eefc49cea13f4380beb87283ddfc2c322950a56653610b4dab47348d53043092e72a23620ce7b872ff25129786c240eaff9c082a74eaee0cd3ff6963e49a4acce56b7efdd2440a9e6b34d78f61d53d9c930ce1b6bc41cce4157bc89e708bba2156568b79eb9a4c9489c4ca89432d1e1ce80fb1a015c7791ae7abe5c1d7d0042e10fd54f8e28372c475d81c8c4ceee259fd7774d77ac7a39bfa6e22b9f654bcf2c3267b4ec3705d78d02f1ecb81c6a6845b9d13ad0fb239aae98f0cbe025c86bdc3ae4390246cee30831313e218863498b4dc32c4538a237dbbfd9fe5e46f170568bbe69f4c97efbb3abecfe03505192ae67cb1a15900ac6bae935bfc04e1c09117c7fce8314772a542b61c26ee2fc0ce8457cc68b31a283c477234a3a1ae9aaedefafeb7e62da34ffc9b437af56cacb05db89a433f9935f9b552f2de465af4be1e7b5ceddad91961749f0780702a520366dd1a5d3d4040c16dd38854c3a73d6af8f395b28a43cd1affe84e47b7cc71017b45fbbfa3a235778fa5c1b58989fb9ca15a4d4f2f928d9519d6525e77a7de225390ffe639df7a899e46dffb74a10d7ef8476eade98d3c4a9ba2822b5ad8767f3679bcda963ec8", 0x1000) (async, rerun: 64) socket$inet(0x2, 0x1, 0x1) (rerun: 64) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0xfe396694ecf7fdc4, @remote, 0x4e24, 0x2, 'wlc\x00', 0x1c, 0x10000, 0x7a}, 0x2c) 19:39:29 executing program 1: r0 = socket(0x22, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x1000) accept$packet(r0, 0x0, 0x0) [ 1310.187879] IPVS: set_ctl: invalid protocol: 64964 172.20.20.187:20004 [ 1310.197127] FAULT_INJECTION: forcing a failure. [ 1310.197127] name failslab, interval 1, probability 0, space 0, times 0 19:39:29 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:29 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) [ 1310.233615] CPU: 0 PID: 14005 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 1310.241511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1310.250853] Call Trace: [ 1310.250868] dump_stack+0x1b2/0x281 [ 1310.250883] should_fail.cold+0x10a/0x149 [ 1310.250897] should_failslab+0xd6/0x130 [ 1310.265194] kmem_cache_alloc+0x28e/0x3c0 [ 1310.265209] getname_flags+0xc8/0x550 [ 1310.265222] do_sys_open+0x1ce/0x410 [ 1310.265231] ? filp_open+0x60/0x60 19:39:29 executing program 1: r0 = socket(0x22, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x1000) (async) accept$packet(r0, 0x0, 0x0) 19:39:29 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) [ 1310.265243] ? __do_page_fault+0x159/0xad0 [ 1310.284625] ? do_syscall_64+0x4c/0x640 [ 1310.288599] ? SyS_open+0x30/0x30 [ 1310.292047] do_syscall_64+0x1d5/0x640 [ 1310.292065] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1310.292073] RIP: 0033:0x7f21c1207209 [ 1310.292081] RSP: 002b:00007f21bfb7c168 EFLAGS: 00000246 [ 1310.301207] ORIG_RAX: 0000000000000101 [ 1310.314229] RAX: ffffffffffffffda RBX: 00007f21c1319f60 RCX: 00007f21c1207209 [ 1310.321591] RDX: 0000000000000002 RSI: 0000000020000140 RDI: ffffffffffffff9c 19:39:29 executing program 3: r0 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ff}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8081) getsockname$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x20) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x400, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x9, r3}) 19:39:29 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x40048085) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x27}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) [ 1310.328881] RBP: 00007f21bfb7c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1310.336148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.343406] R13: 00007ffef54a865f R14: 00007f21bfb7c300 R15: 0000000000022000 19:39:29 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (fail_nth: 2) 19:39:29 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:29 executing program 1: r0 = socket(0x22, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x1000) accept$packet(r0, 0x0, 0x0) socket(0x22, 0x3, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x1000) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:29 executing program 3: r0 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ff}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8081) getsockname$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x20) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x400, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x9, r3}) [ 1310.403437] can: request_module (can-proto-4) failed. [ 1310.463115] FAULT_INJECTION: forcing a failure. [ 1310.463115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1310.474925] CPU: 1 PID: 14062 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 1310.482794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1310.492143] Call Trace: [ 1310.494731] dump_stack+0x1b2/0x281 [ 1310.498377] should_fail.cold+0x10a/0x149 [ 1310.502523] __alloc_pages_nodemask+0x22c/0x2720 [ 1310.507276] ? lock_downgrade+0x740/0x740 [ 1310.511424] ? __lock_acquire+0x5fc/0x3f20 [ 1310.515657] ? get_pid_task+0x91/0x130 [ 1310.519536] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1310.519549] ? lock_downgrade+0x740/0x740 [ 1310.519562] ? get_pid_task+0xb8/0x130 [ 1310.528513] ? proc_fail_nth_write+0x7b/0x180 [ 1310.528522] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1310.528537] cache_grow_begin+0x91/0x700 [ 1310.528546] ? fs_reclaim_release+0xd0/0x110 [ 1310.528557] ? check_preemption_disabled+0x35/0x240 [ 1310.528568] cache_alloc_refill+0x273/0x350 [ 1310.528582] kmem_cache_alloc+0x333/0x3c0 [ 1310.528594] getname_flags+0xc8/0x550 [ 1310.528606] do_sys_open+0x1ce/0x410 [ 1310.571244] ? filp_open+0x60/0x60 [ 1310.574793] ? __do_page_fault+0x159/0xad0 [ 1310.579034] ? do_syscall_64+0x4c/0x640 [ 1310.583093] ? SyS_open+0x30/0x30 [ 1310.586543] do_syscall_64+0x1d5/0x640 [ 1310.590454] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1310.595635] RIP: 0033:0x7f21c1207209 [ 1310.599337] RSP: 002b:00007f21bfb7c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1310.607044] RAX: ffffffffffffffda RBX: 00007f21c1319f60 RCX: 00007f21c1207209 [ 1310.614322] RDX: 0000000000000002 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 1310.621588] RBP: 00007f21bfb7c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1310.628862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.636131] R13: 00007ffef54a865f R14: 00007f21bfb7c300 R15: 0000000000022000 19:39:30 executing program 2: r0 = socket(0x1d, 0x1, 0x4) setsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)="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", 0x1000) socket$inet(0x2, 0x1, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0xfe396694ecf7fdc4, @remote, 0x4e24, 0x2, 'wlc\x00', 0x1c, 0x10000, 0x7a}, 0x2c) socket(0x1d, 0x1, 0x4) (async) setsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)="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", 0x1000) (async) socket$inet(0x2, 0x1, 0x1) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0xfe396694ecf7fdc4, @remote, 0x4e24, 0x2, 'wlc\x00', 0x1c, 0x10000, 0x7a}, 0x2c) (async) 19:39:30 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40000000}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x42090) 19:39:30 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:30 executing program 3: r0 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ff}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8081) getsockname$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x20) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r2) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x400, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x9, r3}) 19:39:30 executing program 1: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)="14ca2d710c25012829328daf2513a7d6d6fad541d0b961b8f1c379d9609e934af8c84fe52d78693460759e1e8ef6b1cae4f5ecc40680c07fe9c0a07707222f2eecddc3b2fce152e636091d815a", 0x4d) r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) 19:39:30 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (fail_nth: 3) 19:39:30 executing program 1: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)="14ca2d710c25012829328daf2513a7d6d6fad541d0b961b8f1c379d9609e934af8c84fe52d78693460759e1e8ef6b1cae4f5ecc40680c07fe9c0a07707222f2eecddc3b2fce152e636091d815a", 0x4d) (async) r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) [ 1311.088164] FAULT_INJECTION: forcing a failure. [ 1311.088164] name failslab, interval 1, probability 0, space 0, times 0 [ 1311.124021] CPU: 1 PID: 14206 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 1311.131918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1311.141266] Call Trace: [ 1311.143863] dump_stack+0x1b2/0x281 [ 1311.147491] should_fail.cold+0x10a/0x149 [ 1311.151643] should_failslab+0xd6/0x130 [ 1311.155618] kmem_cache_alloc+0x28e/0x3c0 [ 1311.159768] get_empty_filp+0x86/0x3f0 [ 1311.162504] can: request_module (can-proto-4) failed. [ 1311.163653] path_openat+0x84/0x2970 [ 1311.163666] ? get_pid_task+0x91/0x130 [ 1311.176434] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1311.181272] ? path_lookupat+0x780/0x780 [ 1311.185332] ? trace_hardirqs_on+0x10/0x10 [ 1311.189576] do_filp_open+0x179/0x3c0 [ 1311.193373] ? may_open_dev+0xe0/0xe0 [ 1311.197171] ? __alloc_fd+0x1be/0x490 [ 1311.200970] ? lock_downgrade+0x740/0x740 [ 1311.205117] ? do_raw_spin_unlock+0x164/0x220 [ 1311.209605] ? _raw_spin_unlock+0x29/0x40 [ 1311.213748] ? __alloc_fd+0x1be/0x490 [ 1311.214021] IPVS: set_ctl: invalid protocol: 64964 172.20.20.187:20004 [ 1311.217744] do_sys_open+0x296/0x410 [ 1311.217755] ? filp_open+0x60/0x60 [ 1311.217766] ? __do_page_fault+0x159/0xad0 [ 1311.217778] ? do_syscall_64+0x4c/0x640 [ 1311.235926] IPVS: set_ctl: invalid protocol: 64964 172.20.20.187:20004 [ 1311.235966] ? SyS_open+0x30/0x30 [ 1311.249812] can: request_module (can-proto-4) failed. [ 1311.250031] do_syscall_64+0x1d5/0x640 [ 1311.259163] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1311.264606] RIP: 0033:0x7f21c1207209 [ 1311.268304] RSP: 002b:00007f21bfb7c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1311.276004] RAX: ffffffffffffffda RBX: 00007f21c1319f60 RCX: 00007f21c1207209 19:39:30 executing program 3: r0 = socket(0x25, 0x5, 0x0) socket(0x28, 0x2, 0x40) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:30 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40000000}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x42090) 19:39:30 executing program 2: socket$inet(0x2, 0x2, 0x2001) 19:39:30 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:30 executing program 1: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)="14ca2d710c25012829328daf2513a7d6d6fad541d0b961b8f1c379d9609e934af8c84fe52d78693460759e1e8ef6b1cae4f5ecc40680c07fe9c0a07707222f2eecddc3b2fce152e636091d815a", 0x4d) r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) 19:39:30 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40000000}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x42090) [ 1311.283272] RDX: 0000000000000002 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 1311.290532] RBP: 00007f21bfb7c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1311.290537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.290544] R13: 00007ffef54a865f R14: 00007f21bfb7c300 R15: 0000000000022000 19:39:30 executing program 2: socket$inet(0x2, 0x2, 0x2001) 19:39:30 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:30 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xdc}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 19:39:30 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (fail_nth: 4) 19:39:30 executing program 3: r0 = socket(0x25, 0x5, 0x0) (async) socket(0x28, 0x2, 0x40) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:30 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x9, 0x0, 0x1, 0xff, 0x6, @broadcast}, 0x14) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, &(0x7f0000000000)=""/4096, 0x1000, 0x40000000, &(0x7f0000001000)={0x11, 0x8, 0x0, 0x1, 0xbc, 0x6, @local}, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r4, &(0x7f0000001180)={0x11, 0x1b, r6, 0x1, 0x2, 0x6, @remote}, 0x14) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r7, 0xa6844072d0816f22, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) 19:39:30 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:30 executing program 2: socket$inet(0x2, 0x2, 0x2001) 19:39:30 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xdc}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 19:39:30 executing program 3: r0 = socket(0x25, 0x5, 0x0) socket(0x28, 0x2, 0x40) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket(0x25, 0x5, 0x0) (async) socket(0x28, 0x2, 0x40) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) 19:39:30 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x9, 0x0, 0x1, 0xff, 0x6, @broadcast}, 0x14) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) recvfrom$packet(r1, &(0x7f0000000000)=""/4096, 0x1000, 0x40000000, &(0x7f0000001000)={0x11, 0x8, 0x0, 0x1, 0xbc, 0x6, @local}, 0x14) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) (async) bind$packet(r4, &(0x7f0000001180)={0x11, 0x1b, r6, 0x1, 0x2, 0x6, @remote}, 0x14) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r7, 0xa6844072d0816f22, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) 19:39:30 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:39:30 executing program 2: socket$inet(0x2, 0x2, 0x1) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0xa, 0xafce1e63, 0x2}) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) [ 1311.447628] FAULT_INJECTION: forcing a failure. [ 1311.447628] name failslab, interval 1, probability 0, space 0, times 0 [ 1311.514563] CPU: 1 PID: 14263 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 1311.522478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1311.531837] Call Trace: [ 1311.534421] dump_stack+0x1b2/0x281 [ 1311.538071] should_fail.cold+0x10a/0x149 [ 1311.542218] should_failslab+0xd6/0x130 [ 1311.546215] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1311.550887] apparmor_file_alloc_security+0x129/0x800 [ 1311.556181] security_file_alloc+0x66/0xa0 [ 1311.560413] ? selinux_is_enabled+0x5/0x50 [ 1311.564645] get_empty_filp+0x16b/0x3f0 [ 1311.568615] path_openat+0x84/0x2970 [ 1311.572325] ? get_pid_task+0x91/0x130 [ 1311.576208] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1311.581049] ? path_lookupat+0x780/0x780 [ 1311.585195] ? trace_hardirqs_on+0x10/0x10 [ 1311.589435] do_filp_open+0x179/0x3c0 [ 1311.593233] ? may_open_dev+0xe0/0xe0 [ 1311.597030] ? __alloc_fd+0x1be/0x490 [ 1311.600924] ? lock_downgrade+0x740/0x740 [ 1311.605075] ? do_raw_spin_unlock+0x164/0x220 [ 1311.609646] ? _raw_spin_unlock+0x29/0x40 [ 1311.609655] ? __alloc_fd+0x1be/0x490 [ 1311.609669] do_sys_open+0x296/0x410 [ 1311.621373] ? filp_open+0x60/0x60 [ 1311.624910] ? __do_page_fault+0x159/0xad0 [ 1311.629133] ? do_syscall_64+0x4c/0x640 [ 1311.633100] ? SyS_open+0x30/0x30 [ 1311.636552] do_syscall_64+0x1d5/0x640 [ 1311.640441] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1311.645622] RIP: 0033:0x7f21c1207209 [ 1311.649323] RSP: 002b:00007f21bfb7c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1311.657029] RAX: ffffffffffffffda RBX: 00007f21c1319f60 RCX: 00007f21c1207209 19:39:30 executing program 2: socket$inet(0x2, 0x2, 0x1) (async, rerun: 64) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0xa, 0xafce1e63, 0x2}) (async, rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) 19:39:30 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:39:30 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (fail_nth: 5) 19:39:30 executing program 3: r0 = socket(0x25, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="b43cfaa82681cde97347632f0500", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040080) 19:39:30 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xdc}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x10) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xdc}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) 19:39:30 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 1311.657034] RDX: 0000000000000002 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 1311.657039] RBP: 00007f21bfb7c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1311.657044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.657049] R13: 00007ffef54a865f R14: 00007f21bfb7c300 R15: 0000000000022000 19:39:30 executing program 2: socket$inet(0x2, 0x2, 0x1) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0xa, 0xafce1e63, 0x2}) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) socket$inet(0x2, 0x2, 0x1) (async) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0xa, 0xafce1e63, 0x2}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) (async) [ 1311.739713] FAULT_INJECTION: forcing a failure. [ 1311.739713] name failslab, interval 1, probability 0, space 0, times 0 [ 1311.784364] CPU: 1 PID: 14301 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 1311.792264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1311.801638] Call Trace: [ 1311.804402] dump_stack+0x1b2/0x281 [ 1311.808051] should_fail.cold+0x10a/0x149 [ 1311.812208] should_failslab+0xd6/0x130 [ 1311.816193] kmem_cache_alloc_trace+0x47/0x3d0 [ 1311.820780] proc_thread_self_get_link+0x17b/0x1e0 [ 1311.825706] ? proc_setup_self+0x390/0x390 [ 1311.829939] link_path_walk+0xc47/0x10a0 [ 1311.834006] ? walk_component+0xbc0/0xbc0 [ 1311.838586] path_openat+0x15e/0x2970 [ 1311.842417] ? get_pid_task+0x91/0x130 [ 1311.846304] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1311.851127] ? path_lookupat+0x780/0x780 [ 1311.855174] ? trace_hardirqs_on+0x10/0x10 [ 1311.859401] do_filp_open+0x179/0x3c0 [ 1311.863184] ? may_open_dev+0xe0/0xe0 [ 1311.867124] ? do_raw_spin_unlock+0x164/0x220 [ 1311.871603] ? __alloc_fd+0x1be/0x490 [ 1311.875484] do_sys_open+0x296/0x410 [ 1311.879203] ? filp_open+0x60/0x60 [ 1311.882731] ? __do_page_fault+0x159/0xad0 [ 1311.886948] ? do_syscall_64+0x4c/0x640 [ 1311.890902] ? SyS_open+0x30/0x30 [ 1311.894341] do_syscall_64+0x1d5/0x640 [ 1311.898305] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1311.903518] RIP: 0033:0x7f21c1207209 [ 1311.907470] RSP: 002b:00007f21bfb7c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1311.915159] RAX: ffffffffffffffda RBX: 00007f21c1319f60 RCX: 00007f21c1207209 [ 1311.922413] RDX: 0000000000000002 RSI: 0000000020000140 RDI: ffffffffffffff9c 19:39:30 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x6}, 0x6) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x1, 0x0, 0x16) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 19:39:30 executing program 0: r0 = socket(0x22, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x1000) accept$packet(r0, 0x0, 0x0) [ 1311.929658] RBP: 00007f21bfb7c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1311.936904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.944352] R13: 00007ffef54a865f R14: 00007f21bfb7c300 R15: 0000000000022000 19:39:30 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x9, 0x0, 0x1, 0xff, 0x6, @broadcast}, 0x14) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) recvfrom$packet(r1, &(0x7f0000000000)=""/4096, 0x1000, 0x40000000, &(0x7f0000001000)={0x11, 0x8, 0x0, 0x1, 0xbc, 0x6, @local}, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r4, &(0x7f0000001180)={0x11, 0x1b, r6, 0x1, 0x2, 0x6, @remote}, 0x14) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r7, 0xa6844072d0816f22, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x9, 0x0, 0x1, 0xff, 0x6, @broadcast}, 0x14) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) recvfrom$packet(r1, &(0x7f0000000000)=""/4096, 0x1000, 0x40000000, &(0x7f0000001000)={0x11, 0x8, 0x0, 0x1, 0xbc, 0x6, @local}, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) (async) bind$packet(r4, &(0x7f0000001180)={0x11, 0x1b, r6, 0x1, 0x2, 0x6, @remote}, 0x14) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r7, 0xa6844072d0816f22, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) (async) 19:39:30 executing program 3: r0 = socket(0x25, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="b43cfaa82681cde97347632f0500", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040080) 19:39:30 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x31) r1 = socket(0x25, 0x5, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$rds(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20000010}, 0x4000894) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 19:39:31 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (fail_nth: 6) 19:39:31 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 19:39:31 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:31 executing program 0: getitimer(0x2, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 19:39:31 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x31) r1 = socket(0x25, 0x5, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendmsg$rds(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20000010}, 0x4000894) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 19:39:31 executing program 3: r0 = socket(0x25, 0x5, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="b43cfaa82681cde97347632f0500", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040080) 19:39:31 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:31 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x6}, 0x6) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x1, 0x0, 0x16) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socket$inet(0x2, 0x2, 0x1) (rerun: 32) 19:39:31 executing program 1: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x219) r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80060, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x41) 19:39:31 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (fail_nth: 1) 19:39:31 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x31) r1 = socket(0x25, 0x5, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$rds(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20000010}, 0x4000894) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x31) (async) socket(0x25, 0x5, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendmsg$rds(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20000010}, 0x4000894) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) 19:39:31 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="1ca7414c3cdae74a9cd275e86b2419819b5a1c803cd1426032ad96ae94ef0c30539a826e6eb90cedcb39be341d2317eb164294a53db0591473255708c21bf23c2b9f848642761e1cc472c788a664be995c0f14a8fc4b5085427cbb9a6706f74f23c814e745c533a409bc0c979376a6b5acc2af1b74f726", 0x77, 0x40, 0x0, 0x0) 19:39:31 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 1312.413882] FAULT_INJECTION: forcing a failure. [ 1312.413882] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.434306] CPU: 0 PID: 14385 Comm: syz-executor.0 Not tainted 4.14.289-syzkaller #0 [ 1312.442384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1312.451732] Call Trace: [ 1312.451748] dump_stack+0x1b2/0x281 [ 1312.451763] should_fail.cold+0x10a/0x149 19:39:31 executing program 1: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x219) r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80060, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x41) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x219) (async) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80060, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000040)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x41) (async) [ 1312.451776] should_failslab+0xd6/0x130 [ 1312.451787] kmem_cache_alloc+0x28e/0x3c0 [ 1312.451799] getname_flags+0xc8/0x550 [ 1312.451812] do_sys_open+0x1ce/0x410 [ 1312.458001] ? filp_open+0x60/0x60 [ 1312.458014] ? __do_page_fault+0x159/0xad0 [ 1312.458024] ? do_syscall_64+0x4c/0x640 [ 1312.458034] ? SyS_open+0x30/0x30 [ 1312.470273] do_syscall_64+0x1d5/0x640 [ 1312.470308] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1312.470316] RIP: 0033:0x7fd1e2851209 [ 1312.470324] RSP: 002b:00007fd1e11c6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 19:39:31 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:31 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="1ca7414c3cdae74a9cd275e86b2419819b5a1c803cd1426032ad96ae94ef0c30539a826e6eb90cedcb39be341d2317eb164294a53db0591473255708c21bf23c2b9f848642761e1cc472c788a664be995c0f14a8fc4b5085427cbb9a6706f74f23c814e745c533a409bc0c979376a6b5acc2af1b74f726", 0x77, 0x40, 0x0, 0x0) [ 1312.513376] RAX: ffffffffffffffda RBX: 00007fd1e2963f60 RCX: 00007fd1e2851209 [ 1312.520737] RDX: 0000000000000002 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 1312.520744] RBP: 00007fd1e11c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.520750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.520755] R13: 00007fff3341e31f R14: 00007fd1e11c6300 R15: 0000000000022000 19:39:31 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:31 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x6}, 0x6) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r2, 0x0, 0x0, 0x1, 0x0, 0x16) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x6}, 0x6) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r2, 0x0, 0x0, 0x1, 0x0, 0x16) (async) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet(0x2, 0x2, 0x1) (async) 19:39:31 executing program 1: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x219) r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80060, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x41) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x219) (async) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80060, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000040)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x41) (async) 19:39:31 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="1ca7414c3cdae74a9cd275e86b2419819b5a1c803cd1426032ad96ae94ef0c30539a826e6eb90cedcb39be341d2317eb164294a53db0591473255708c21bf23c2b9f848642761e1cc472c788a664be995c0f14a8fc4b5085427cbb9a6706f74f23c814e745c533a409bc0c979376a6b5acc2af1b74f726", 0x77, 0x40, 0x0, 0x0) socket(0x25, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="1ca7414c3cdae74a9cd275e86b2419819b5a1c803cd1426032ad96ae94ef0c30539a826e6eb90cedcb39be341d2317eb164294a53db0591473255708c21bf23c2b9f848642761e1cc472c788a664be995c0f14a8fc4b5085427cbb9a6706f74f23c814e745c533a409bc0c979376a6b5acc2af1b74f726", 0x77, 0x40, 0x0, 0x0) (async) 19:39:31 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (fail_nth: 2) 19:39:31 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008041) r1 = socket(0xe, 0xa, 0x5) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 19:39:31 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) [ 1312.683826] FAULT_INJECTION: forcing a failure. [ 1312.683826] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1312.695641] CPU: 0 PID: 14437 Comm: syz-executor.0 Not tainted 4.14.289-syzkaller #0 [ 1312.703607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1312.713070] Call Trace: [ 1312.713085] dump_stack+0x1b2/0x281 [ 1312.713105] should_fail.cold+0x10a/0x149 [ 1312.713119] __alloc_pages_nodemask+0x22c/0x2720 [ 1312.713131] ? lock_downgrade+0x740/0x740 19:39:31 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0xcc6a, [0x2530, 0xf33e]}, 0x10) accept$packet(r0, 0x0, 0x0) [ 1312.732329] ? __lock_acquire+0x5fc/0x3f20 [ 1312.737471] ? get_pid_task+0x91/0x130 [ 1312.741748] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1312.749547] ? lock_downgrade+0x740/0x740 [ 1312.753709] ? get_pid_task+0xb8/0x130 [ 1312.757654] ? proc_fail_nth_write+0x7b/0x180 [ 1312.762150] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1312.767078] cache_grow_begin+0x91/0x700 [ 1312.771176] ? fs_reclaim_release+0xd0/0x110 [ 1312.771190] ? check_preemption_disabled+0x35/0x240 19:39:31 executing program 1: r0 = socket(0x22, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0xcc6a, [0x2530, 0xf33e]}, 0x10) (async) accept$packet(r0, 0x0, 0x0) [ 1312.771205] cache_alloc_refill+0x273/0x350 [ 1312.771218] kmem_cache_alloc+0x333/0x3c0 [ 1312.771230] getname_flags+0xc8/0x550 [ 1312.792853] do_sys_open+0x1ce/0x410 [ 1312.796565] ? filp_open+0x60/0x60 [ 1312.800204] ? __do_page_fault+0x159/0xad0 [ 1312.804437] ? do_syscall_64+0x4c/0x640 [ 1312.808404] ? SyS_open+0x30/0x30 [ 1312.811858] do_syscall_64+0x1d5/0x640 [ 1312.815750] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1312.820932] RIP: 0033:0x7fd1e2851209 [ 1312.824640] RSP: 002b:00007fd1e11c6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 19:39:31 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (fail_nth: 3) [ 1312.832354] RAX: ffffffffffffffda RBX: 00007fd1e2963f60 RCX: 00007fd1e2851209 [ 1312.839624] RDX: 0000000000000002 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 1312.839630] RBP: 00007fd1e11c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.839636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.839642] R13: 00007fff3341e31f R14: 00007fd1e11c6300 R15: 0000000000022000 [ 1312.877482] FAULT_INJECTION: forcing a failure. 19:39:31 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 1312.877482] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.889953] CPU: 0 PID: 14483 Comm: syz-executor.0 Not tainted 4.14.289-syzkaller #0 [ 1312.897853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1312.907209] Call Trace: [ 1312.909796] dump_stack+0x1b2/0x281 [ 1312.913512] should_fail.cold+0x10a/0x149 [ 1312.917673] should_failslab+0xd6/0x130 [ 1312.921648] kmem_cache_alloc+0x28e/0x3c0 [ 1312.925795] get_empty_filp+0x86/0x3f0 [ 1312.929771] path_openat+0x84/0x2970 19:39:31 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0xcc6a, [0x2530, 0xf33e]}, 0x10) accept$packet(r0, 0x0, 0x0) [ 1312.933491] ? get_pid_task+0x91/0x130 [ 1312.937380] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1312.942223] ? path_lookupat+0x780/0x780 [ 1312.946282] ? trace_hardirqs_on+0x10/0x10 [ 1312.950522] do_filp_open+0x179/0x3c0 [ 1312.954318] ? may_open_dev+0xe0/0xe0 [ 1312.958114] ? __alloc_fd+0x1be/0x490 [ 1312.961913] ? lock_downgrade+0x740/0x740 [ 1312.966169] ? do_raw_spin_unlock+0x164/0x220 [ 1312.970661] ? _raw_spin_unlock+0x29/0x40 [ 1312.974798] ? __alloc_fd+0x1be/0x490 [ 1312.974816] do_sys_open+0x296/0x410 [ 1312.974827] ? filp_open+0x60/0x60 [ 1312.974838] ? __do_page_fault+0x159/0xad0 [ 1312.985839] ? do_syscall_64+0x4c/0x640 [ 1312.985848] ? SyS_open+0x30/0x30 [ 1312.985858] do_syscall_64+0x1d5/0x640 [ 1312.985875] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1312.985883] RIP: 0033:0x7fd1e2851209 [ 1312.985888] RSP: 002b:00007fd1e11c6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1312.985898] RAX: ffffffffffffffda RBX: 00007fd1e2963f60 RCX: 00007fd1e2851209 [ 1312.985906] RDX: 0000000000000002 RSI: 0000000020000140 RDI: ffffffffffffff9c 19:39:32 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendto$l2tp6(r1, &(0x7f0000001300)="de021a713295df125463e6c5b30b630d0253b6bc6d", 0x15, 0x40000, &(0x7f0000001340)={0xa, 0x0, 0x5, @private1, 0x4, 0x4}, 0x20) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = accept$packet(r2, &(0x7f0000001240), &(0x7f0000001280)=0x14) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f00000012c0)=0x53e0bf8c, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x38, 0x0, 0x629, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}]}, 0x38}}, 0x48840) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x48, r5, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000000c0)="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") 19:39:32 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000040)={0x0, 0x1}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:32 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008041) r1 = socket(0xe, 0xa, 0x5) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008041) (async) socket(0xe, 0xa, 0x5) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) [ 1313.032453] RBP: 00007fd1e11c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1313.039721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.046986] R13: 00007fff3341e31f R14: 00007fd1e11c6300 R15: 0000000000022000 19:39:32 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:32 executing program 2: socket$inet(0x2, 0x2, 0x3fc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) getgroups(0x40000089, &(0x7f00000001c0)=[r1, 0xffffffffffffffff]) getgroups(0x6, &(0x7f0000000180)=[0xffffffffffffffff, r2, r3, 0xffffffffffffffff, 0xee01, 0xee00]) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000200)={{0xff80, 0x9, 0x1, 0x2}, 'syz0\x00', 0x8}) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) 19:39:32 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000040)={0x0, 0x1}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:32 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendto$l2tp6(r1, &(0x7f0000001300)="de021a713295df125463e6c5b30b630d0253b6bc6d", 0x15, 0x40000, &(0x7f0000001340)={0xa, 0x0, 0x5, @private1, 0x4, 0x4}, 0x20) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = accept$packet(r2, &(0x7f0000001240), &(0x7f0000001280)=0x14) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f00000012c0)=0x53e0bf8c, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x38, 0x0, 0x629, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}]}, 0x38}}, 0x48840) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x48, r5, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000000c0)="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") socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) sendto$l2tp6(r1, &(0x7f0000001300)="de021a713295df125463e6c5b30b630d0253b6bc6d", 0x15, 0x40000, &(0x7f0000001340)={0xa, 0x0, 0x5, @private1, 0x4, 0x4}, 0x20) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) accept$packet(r2, &(0x7f0000001240), &(0x7f0000001280)=0x14) (async) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f00000012c0)=0x53e0bf8c, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x38, 0x0, 0x629, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}]}, 0x38}}, 0x48840) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001100), r0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x48, r5, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) (async) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) (async) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000000c0)="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") (async) 19:39:32 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 19:39:32 executing program 3: r0 = socket(0x25, 0x5, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000040)={0x0, 0x1}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:32 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (fail_nth: 4) 19:39:32 executing program 5: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x7, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e23, 0x7, @local, 0x5877}}}, 0x38) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:32 executing program 2: socket$inet(0x2, 0x2, 0x3fc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) getgroups(0x40000089, &(0x7f00000001c0)=[r1, 0xffffffffffffffff]) getgroups(0x6, &(0x7f0000000180)=[0xffffffffffffffff, r2, r3, 0xffffffffffffffff, 0xee01, 0xee00]) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000200)={{0xff80, 0x9, 0x1, 0x2}, 'syz0\x00', 0x8}) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) socket$inet(0x2, 0x2, 0x3fc) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async) getgroups(0x40000089, &(0x7f00000001c0)=[r1, 0xffffffffffffffff]) (async) getgroups(0x6, &(0x7f0000000180)=[0xffffffffffffffff, r2, r3, 0xffffffffffffffff, 0xee01, 0xee00]) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0x0) (async) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000200)={{0xff80, 0x9, 0x1, 0x2}, 'syz0\x00', 0x8}) (async) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) (async) 19:39:32 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008041) (async) r1 = socket(0xe, 0xa, 0x5) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 19:39:32 executing program 5: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x7, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e23, 0x7, @local, 0x5877}}}, 0x38) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:32 executing program 4: r0 = socket(0xf, 0x5, 0x4) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000000)={0x0, 0x6}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0xf78, {0x20, 0xeae, 0x80000001, 0x3, 0xaa3, 0x400}}) 19:39:32 executing program 3: r0 = socket(0x25, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={0x0, 0x25}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000100370000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44054}, 0x8000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f00000001c0)=""/4}) 19:39:32 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) sendto$l2tp6(r1, &(0x7f0000001300)="de021a713295df125463e6c5b30b630d0253b6bc6d", 0x15, 0x40000, &(0x7f0000001340)={0xa, 0x0, 0x5, @private1, 0x4, 0x4}, 0x20) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = accept$packet(r2, &(0x7f0000001240), &(0x7f0000001280)=0x14) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f00000012c0)=0x53e0bf8c, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x38, 0x0, 0x629, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}]}, 0x38}}, 0x48840) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), r0) (rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x48, r5, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) (async, rerun: 32) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000000c0)="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") (rerun: 32) [ 1313.262420] FAULT_INJECTION: forcing a failure. [ 1313.262420] name failslab, interval 1, probability 0, space 0, times 0 19:39:32 executing program 5: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x7, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e23, 0x7, @local, 0x5877}}}, 0x38) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) [ 1313.317374] CPU: 1 PID: 14545 Comm: syz-executor.0 Not tainted 4.14.289-syzkaller #0 [ 1313.325275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1313.334629] Call Trace: [ 1313.337213] dump_stack+0x1b2/0x281 [ 1313.340846] should_fail.cold+0x10a/0x149 [ 1313.344995] should_failslab+0xd6/0x130 [ 1313.345010] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1313.345024] apparmor_file_alloc_security+0x129/0x800 [ 1313.358809] security_file_alloc+0x66/0xa0 [ 1313.363038] ? selinux_is_enabled+0x5/0x50 [ 1313.367273] get_empty_filp+0x16b/0x3f0 [ 1313.371240] path_openat+0x84/0x2970 [ 1313.371252] ? get_pid_task+0x91/0x130 [ 1313.371262] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1313.371273] ? path_lookupat+0x780/0x780 [ 1313.387711] ? trace_hardirqs_on+0x10/0x10 [ 1313.391947] do_filp_open+0x179/0x3c0 [ 1313.395734] ? may_open_dev+0xe0/0xe0 [ 1313.395746] ? __alloc_fd+0x1be/0x490 [ 1313.395760] ? lock_downgrade+0x740/0x740 [ 1313.395771] ? do_raw_spin_unlock+0x164/0x220 [ 1313.395781] ? _raw_spin_unlock+0x29/0x40 [ 1313.395788] ? __alloc_fd+0x1be/0x490 [ 1313.395803] do_sys_open+0x296/0x410 [ 1313.395812] ? filp_open+0x60/0x60 [ 1313.395824] ? __do_page_fault+0x159/0xad0 [ 1313.395834] ? do_syscall_64+0x4c/0x640 [ 1313.395842] ? SyS_open+0x30/0x30 [ 1313.395850] do_syscall_64+0x1d5/0x640 [ 1313.395865] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1313.412023] RIP: 0033:0x7fd1e2851209 [ 1313.412029] RSP: 002b:00007fd1e11c6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1313.412041] RAX: ffffffffffffffda RBX: 00007fd1e2963f60 RCX: 00007fd1e2851209 19:39:32 executing program 4: r0 = socket(0xf, 0x5, 0x4) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000000)={0x0, 0x6}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0xf78, {0x20, 0xeae, 0x80000001, 0x3, 0xaa3, 0x400}}) 19:39:32 executing program 2: socket$inet(0x2, 0x2, 0x3fc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) getgroups(0x40000089, &(0x7f00000001c0)=[r1, 0xffffffffffffffff]) getgroups(0x6, &(0x7f0000000180)=[0xffffffffffffffff, r2, r3, 0xffffffffffffffff, 0xee01, 0xee00]) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000200)={{0xff80, 0x9, 0x1, 0x2}, 'syz0\x00', 0x8}) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) socket$inet(0x2, 0x2, 0x3fc) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async) getgroups(0x40000089, &(0x7f00000001c0)=[r1, 0xffffffffffffffff]) (async) getgroups(0x6, &(0x7f0000000180)=[0xffffffffffffffff, r2, r3, 0xffffffffffffffff, 0xee01, 0xee00]) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0x0) (async) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000200)={{0xff80, 0x9, 0x1, 0x2}, 'syz0\x00', 0x8}) (async) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) (async) 19:39:32 executing program 4: r0 = socket(0xf, 0x5, 0x4) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000000)={0x0, 0x6}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0xf78, {0x20, 0xeae, 0x80000001, 0x3, 0xaa3, 0x400}}) socket(0xf, 0x5, 0x4) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000000)={0x0, 0x6}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) (async) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0xf78, {0x20, 0xeae, 0x80000001, 0x3, 0xaa3, 0x400}}) (async) [ 1313.412047] RDX: 0000000000000002 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 1313.412052] RBP: 00007fd1e11c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1313.412059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.419965] R13: 00007fff3341e31f R14: 00007fd1e11c6300 R15: 0000000000022000 19:39:32 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (fail_nth: 5) 19:39:32 executing program 3: r0 = socket(0x25, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={0x0, 0x25}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000100370000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44054}, 0x8000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f00000001c0)=""/4}) 19:39:32 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) r2 = accept$packet(r1, 0x0, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={r4, 0x1, 0x6, @remote}, 0x10) 19:39:32 executing program 4: r0 = socket(0x1e, 0x2, 0x10003) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbea394607edfb2d}, 0x44894) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0xd, 0xffff, 0x40}) write$input_event(r1, &(0x7f0000000080)={{0x77359400}, 0x1f, 0x6, 0x30000}, 0x18) 19:39:32 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xffffff93, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_macvtap\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0xa15b8447c2d5926e) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 19:39:32 executing program 2: socket$inet(0x2, 0x1, 0x39) 19:39:32 executing program 4: r0 = socket(0x1e, 0x2, 0x10003) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbea394607edfb2d}, 0x44894) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0xd, 0xffff, 0x40}) (async) write$input_event(r1, &(0x7f0000000080)={{0x77359400}, 0x1f, 0x6, 0x30000}, 0x18) 19:39:32 executing program 3: r0 = socket(0x25, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={0x0, 0x25}) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000100370000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44054}, 0x8000) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f00000001c0)=""/4}) 19:39:32 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xffffff93, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_macvtap\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0xa15b8447c2d5926e) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 19:39:32 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) r2 = accept$packet(r1, 0x0, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) (async) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={r4, 0x1, 0x6, @remote}, 0x10) 19:39:32 executing program 2: socket$inet(0x2, 0x1, 0x39) [ 1313.654807] FAULT_INJECTION: forcing a failure. [ 1313.654807] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.697365] CPU: 1 PID: 14612 Comm: syz-executor.0 Not tainted 4.14.289-syzkaller #0 [ 1313.705272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1313.714621] Call Trace: [ 1313.717207] dump_stack+0x1b2/0x281 [ 1313.720844] should_fail.cold+0x10a/0x149 [ 1313.724994] should_failslab+0xd6/0x130 [ 1313.728970] kmem_cache_alloc_trace+0x47/0x3d0 [ 1313.733553] proc_thread_self_get_link+0x17b/0x1e0 [ 1313.738578] ? proc_setup_self+0x390/0x390 [ 1313.742814] link_path_walk+0xc47/0x10a0 [ 1313.746881] ? walk_component+0xbc0/0xbc0 [ 1313.751119] path_openat+0x15e/0x2970 [ 1313.754920] ? get_pid_task+0x91/0x130 [ 1313.758805] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1313.763645] ? path_lookupat+0x780/0x780 [ 1313.767705] ? trace_hardirqs_on+0x10/0x10 [ 1313.771946] do_filp_open+0x179/0x3c0 [ 1313.775750] ? may_open_dev+0xe0/0xe0 [ 1313.779661] ? do_raw_spin_unlock+0x164/0x220 [ 1313.784151] ? __alloc_fd+0x1be/0x490 [ 1313.787956] do_sys_open+0x296/0x410 [ 1313.791667] ? filp_open+0x60/0x60 [ 1313.795645] ? __do_page_fault+0x159/0xad0 [ 1313.799878] ? do_syscall_64+0x4c/0x640 [ 1313.803853] ? SyS_open+0x30/0x30 [ 1313.807303] do_syscall_64+0x1d5/0x640 [ 1313.811192] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1313.816376] RIP: 0033:0x7fd1e2851209 [ 1313.820079] RSP: 002b:00007fd1e11c6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1313.827777] RAX: ffffffffffffffda RBX: 00007fd1e2963f60 RCX: 00007fd1e2851209 [ 1313.827785] RDX: 0000000000000002 RSI: 0000000020000140 RDI: ffffffffffffff9c 19:39:32 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xffffff93, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_macvtap\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0xa15b8447c2d5926e) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xffffff93, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_macvtap\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0xa15b8447c2d5926e) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) 19:39:32 executing program 4: r0 = socket(0x1e, 0x2, 0x10003) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbea394607edfb2d}, 0x44894) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0xd, 0xffff, 0x40}) write$input_event(r1, &(0x7f0000000080)={{0x77359400}, 0x1f, 0x6, 0x30000}, 0x18) 19:39:32 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (fail_nth: 6) 19:39:32 executing program 2: socket$inet(0x2, 0x1, 0x39) 19:39:32 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) r2 = accept$packet(r1, 0x0, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={r4, 0x1, 0x6, @remote}, 0x10) [ 1313.827790] RBP: 00007fd1e11c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1313.827795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.827800] R13: 00007fff3341e31f R14: 00007fd1e11c6300 R15: 0000000000022000 19:39:32 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x34002, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000001c0)={0x2, 0x9, "ba65d3", 0x2, 0x4c}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:32 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) read$watch_queue(r1, &(0x7f0000000000)=""/6, 0x6) 19:39:32 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0xffffffff, 0x4) 19:39:32 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x10, 0x70bd2d, 0x4, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008011}, 0x20004084) 19:39:33 executing program 0: ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x7) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x1, 0x8, 0x7d, 0x100}, 'syz1\x00', 0x3f}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xf6, r2, 0x1, 0x90, 0x6, @remote}, 0x14) 19:39:33 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) read$watch_queue(r1, &(0x7f0000000000)=""/6, 0x6) 19:39:33 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x34002, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000001c0)={0x2, 0x9, "ba65d3", 0x2, 0x4c}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:33 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000000)='syz1\x00') r3 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8100, 0x0) sendto$packet(r4, &(0x7f0000001200)="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", 0x1000, 0x2400, &(0x7f0000000100)={0x11, 0xf7, 0x0, 0x1, 0x4}, 0x2d) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0xd) socket$inet(0x2, 0x2, 0x1) 19:39:33 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) sched_rr_get_interval(0x0, &(0x7f0000000080)) (async, rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0xffffffff, 0x4) 19:39:33 executing program 0: ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x7) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x1, 0x8, 0x7d, 0x100}, 'syz1\x00', 0x3f}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xf6, r2, 0x1, 0x90, 0x6, @remote}, 0x14) 19:39:33 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) read$watch_queue(r1, &(0x7f0000000000)=""/6, 0x6) socket(0x25, 0x5, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) read$watch_queue(r1, &(0x7f0000000000)=""/6, 0x6) (async) 19:39:33 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x34002, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000001c0)={0x2, 0x9, "ba65d3", 0x2, 0x4c}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket(0x25, 0x5, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x34002, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000001c0)={0x2, 0x9, "ba65d3", 0x2, 0x4c}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) 19:39:33 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000000)='syz1\x00') (async) r3 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8100, 0x0) sendto$packet(r4, &(0x7f0000001200)="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", 0x1000, 0x2400, &(0x7f0000000100)={0x11, 0xf7, 0x0, 0x1, 0x4}, 0x2d) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0xd) (async) socket$inet(0x2, 0x2, 0x1) 19:39:33 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x10, 0x70bd2d, 0x4, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008011}, 0x20004084) 19:39:33 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0xffffffff, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) sched_rr_get_interval(0x0, &(0x7f0000000080)) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0xffffffff, 0x4) (async) 19:39:33 executing program 0: ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x7) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x1, 0x8, 0x7d, 0x100}, 'syz1\x00', 0x3f}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xf6, r2, 0x1, 0x90, 0x6, @remote}, 0x14) 19:39:33 executing program 4: r0 = socket(0x2a, 0x4, 0xffff3689) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:33 executing program 3: r0 = socket(0x25, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 19:39:33 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x10, 0x70bd2d, 0x4, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008011}, 0x20004084) 19:39:33 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000000)='syz1\x00') r3 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8100, 0x0) sendto$packet(r4, &(0x7f0000001200)="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", 0x1000, 0x2400, &(0x7f0000000100)={0x11, 0xf7, 0x0, 0x1, 0x4}, 0x2d) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0xd) (async) socket$inet(0x2, 0x2, 0x1) 19:39:33 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:33 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:33 executing program 4: r0 = socket(0x2a, 0x4, 0xffff3689) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:33 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 19:39:33 executing program 3: r0 = socket(0x25, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socket(0x25, 0x2, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) 19:39:33 executing program 2: socket$inet(0x2, 0x2, 0x5) 19:39:33 executing program 4: r0 = socket(0x2a, 0x4, 0xffff3689) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x2a, 0x4, 0xffff3689) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) 19:39:33 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 19:39:33 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:33 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 19:39:33 executing program 3: r0 = socket(0x25, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 19:39:33 executing program 2: socket$inet(0x2, 0x2, 0x5) socket$inet(0x2, 0x2, 0x5) (async) 19:39:33 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:33 executing program 1: r0 = socket(0x22, 0x3, 0x0) r1 = accept$packet(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) 19:39:33 executing program 4: r0 = socket(0x25, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf250600000008000a000100000014002000fc00000000000000000000000000000008001900ac1414aa050013007f00000008001700", @ANYRES32=r0, @ANYBLOB="05001400c0dbcb0000"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1f5b0000", @ANYRESHEX=r4, @ANYBLOB="080026bd7000fddbdf250000000014002000fe800000000000000000000000000027"], 0x28}, 0x1, 0x0, 0x0, 0x48}, 0x800) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:33 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 19:39:33 executing program 3: r0 = socket(0x22, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:33 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000001300)={0x4, 0x0, [{0x1, 0x6, 0x5, [0x6, 0x6, 0x510, 0x5, 0xd85, 0x6, 0x1ff, 0x5]}, {0x10001, 0x5, 0x800, [0xfffffffe, 0x4, 0xfe, 0x90, 0x7, 0xffff, 0x3, 0x5fa21812]}, {0x7f, 0x2, 0x7, [0x9, 0x4, 0x6, 0x0, 0xb2, 0x42e, 0x8, 0x2]}, {0x0, 0x200000, 0x7f, [0x4, 0x5, 0x3, 0x7, 0x0, 0x200, 0x7, 0x80000000]}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000, 0x20, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x20) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) write$apparmor_exec(r2, &(0x7f0000000200)={'exec ', '/proc/thread-self/attr/exec\x00 \x16J\xc7\xec\xc2\xef\xbe\xa2\xa4\xbc\x03\xc1\xc3\xda\xbfk#\x9b\x819\x18\xdd\xf4\xed\x9c\xd9\x80\x9f$,n\xfe\x11\xbc\xcd\xdd\x9a\x1c+\xe17\xbe\x91\xaaE\xeeL\t\xa7\xa7.\xba\x88\xa0\x92\xf2\xca\x94]\x96\xe08\xe1\vU\xc0\x94\xcb\xd9a ?\x04:\xd1\xfc\xa8\x18C\x7f`\x89!2\x8b+\avh\x96=e\x1b\xd6\xfb\xc3\x90\x9eUI(w\xcfeh\xa4\x87\xedu\x99G\x12\xa2\xcf\x06\x03Q\xef\t\xd5q\xcd\x13:\xa0\"jz\xc9\xde<\v\xa6\xe5S\xb6\xcb\xe4\xaf\xd2\xec\xd3p\x91\x96\t\x9d\x9f\x05>\xcbF\x1c&\x8a\xce\xaf\bs\xb9 \x02\xfdg\xe0\x05'}, 0xc8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:33 executing program 1: r0 = socket(0x22, 0x3, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0xc, 0x8, {0x53, 0x5, 0xbd, {0x0, 0x5}, {0x400, 0x9f2e}, @rumble={0x3ff0, 0x1cc}}, {0x51, 0x1ff, 0x1f, {0x571, 0xb222}, {0x0, 0x8}, @rumble={0x315c, 0xffe1}}}) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) accept$packet(r0, 0x0, 0x0) 19:39:33 executing program 4: r0 = socket(0x25, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf250600000008000a000100000014002000fc00000000000000000000000000000008001900ac1414aa050013007f00000008001700", @ANYRES32=r0, @ANYBLOB="05001400c0dbcb0000"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1f5b0000", @ANYRESHEX=r4, @ANYBLOB="080026bd7000fddbdf250000000014002000fe800000000000000000000000000027"], 0x28}, 0x1, 0x0, 0x0, 0x48}, 0x800) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x25, 0x5, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf250600000008000a000100000014002000fc00000000000000000000000000000008001900ac1414aa050013007f00000008001700", @ANYRES32=r0, @ANYBLOB="05001400c0dbcb0000"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1f5b0000", @ANYRESHEX=r4, @ANYBLOB="080026bd7000fddbdf250000000014002000fe800000000000000000000000000027"], 0x28}, 0x1, 0x0, 0x0, 0x48}, 0x800) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) 19:39:33 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:33 executing program 3: r0 = socket(0x22, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket(0x22, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) 19:39:33 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000001300)={0x4, 0x0, [{0x1, 0x6, 0x5, [0x6, 0x6, 0x510, 0x5, 0xd85, 0x6, 0x1ff, 0x5]}, {0x10001, 0x5, 0x800, [0xfffffffe, 0x4, 0xfe, 0x90, 0x7, 0xffff, 0x3, 0x5fa21812]}, {0x7f, 0x2, 0x7, [0x9, 0x4, 0x6, 0x0, 0xb2, 0x42e, 0x8, 0x2]}, {0x0, 0x200000, 0x7f, [0x4, 0x5, 0x3, 0x7, 0x0, 0x200, 0x7, 0x80000000]}]}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000, 0x20, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x20) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) write$apparmor_exec(r2, &(0x7f0000000200)={'exec ', '/proc/thread-self/attr/exec\x00 \x16J\xc7\xec\xc2\xef\xbe\xa2\xa4\xbc\x03\xc1\xc3\xda\xbfk#\x9b\x819\x18\xdd\xf4\xed\x9c\xd9\x80\x9f$,n\xfe\x11\xbc\xcd\xdd\x9a\x1c+\xe17\xbe\x91\xaaE\xeeL\t\xa7\xa7.\xba\x88\xa0\x92\xf2\xca\x94]\x96\xe08\xe1\vU\xc0\x94\xcb\xd9a ?\x04:\xd1\xfc\xa8\x18C\x7f`\x89!2\x8b+\avh\x96=e\x1b\xd6\xfb\xc3\x90\x9eUI(w\xcfeh\xa4\x87\xedu\x99G\x12\xa2\xcf\x06\x03Q\xef\t\xd5q\xcd\x13:\xa0\"jz\xc9\xde<\v\xa6\xe5S\xb6\xcb\xe4\xaf\xd2\xec\xd3p\x91\x96\t\x9d\x9f\x05>\xcbF\x1c&\x8a\xce\xaf\bs\xb9 \x02\xfdg\xe0\x05'}, 0xc8) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:33 executing program 2: socket$inet(0x2, 0x2, 0x5) socket$inet(0x2, 0x2, 0x5) (async) 19:39:33 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:33 executing program 1: r0 = socket(0x22, 0x3, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0xc, 0x8, {0x53, 0x5, 0xbd, {0x0, 0x5}, {0x400, 0x9f2e}, @rumble={0x3ff0, 0x1cc}}, {0x51, 0x1ff, 0x1f, {0x571, 0xb222}, {0x0, 0x8}, @rumble={0x315c, 0xffe1}}}) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) accept$packet(r0, 0x0, 0x0) socket(0x22, 0x3, 0x0) (async) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0xc, 0x8, {0x53, 0x5, 0xbd, {0x0, 0x5}, {0x400, 0x9f2e}, @rumble={0x3ff0, 0x1cc}}, {0x51, 0x1ff, 0x1f, {0x571, 0xb222}, {0x0, 0x8}, @rumble={0x315c, 0xffe1}}}) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:33 executing program 4: r0 = socket(0x25, 0x5, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf250600000008000a000100000014002000fc00000000000000000000000000000008001900ac1414aa050013007f00000008001700", @ANYRES32=r0, @ANYBLOB="05001400c0dbcb0000"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1f5b0000", @ANYRESHEX=r4, @ANYBLOB="080026bd7000fddbdf250000000014002000fe800000000000000000000000000027"], 0x28}, 0x1, 0x0, 0x0, 0x48}, 0x800) (async) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:33 executing program 3: r0 = socket(0x22, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:33 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000001300)={0x4, 0x0, [{0x1, 0x6, 0x5, [0x6, 0x6, 0x510, 0x5, 0xd85, 0x6, 0x1ff, 0x5]}, {0x10001, 0x5, 0x800, [0xfffffffe, 0x4, 0xfe, 0x90, 0x7, 0xffff, 0x3, 0x5fa21812]}, {0x7f, 0x2, 0x7, [0x9, 0x4, 0x6, 0x0, 0xb2, 0x42e, 0x8, 0x2]}, {0x0, 0x200000, 0x7f, [0x4, 0x5, 0x3, 0x7, 0x0, 0x200, 0x7, 0x80000000]}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000, 0x20, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x20) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) write$apparmor_exec(r2, &(0x7f0000000200)={'exec ', '/proc/thread-self/attr/exec\x00 \x16J\xc7\xec\xc2\xef\xbe\xa2\xa4\xbc\x03\xc1\xc3\xda\xbfk#\x9b\x819\x18\xdd\xf4\xed\x9c\xd9\x80\x9f$,n\xfe\x11\xbc\xcd\xdd\x9a\x1c+\xe17\xbe\x91\xaaE\xeeL\t\xa7\xa7.\xba\x88\xa0\x92\xf2\xca\x94]\x96\xe08\xe1\vU\xc0\x94\xcb\xd9a ?\x04:\xd1\xfc\xa8\x18C\x7f`\x89!2\x8b+\avh\x96=e\x1b\xd6\xfb\xc3\x90\x9eUI(w\xcfeh\xa4\x87\xedu\x99G\x12\xa2\xcf\x06\x03Q\xef\t\xd5q\xcd\x13:\xa0\"jz\xc9\xde<\v\xa6\xe5S\xb6\xcb\xe4\xaf\xd2\xec\xd3p\x91\x96\t\x9d\x9f\x05>\xcbF\x1c&\x8a\xce\xaf\bs\xb9 \x02\xfdg\xe0\x05'}, 0xc8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000001300)={0x4, 0x0, [{0x1, 0x6, 0x5, [0x6, 0x6, 0x510, 0x5, 0xd85, 0x6, 0x1ff, 0x5]}, {0x10001, 0x5, 0x800, [0xfffffffe, 0x4, 0xfe, 0x90, 0x7, 0xffff, 0x3, 0x5fa21812]}, {0x7f, 0x2, 0x7, [0x9, 0x4, 0x6, 0x0, 0xb2, 0x42e, 0x8, 0x2]}, {0x0, 0x200000, 0x7f, [0x4, 0x5, 0x3, 0x7, 0x0, 0x200, 0x7, 0x80000000]}]}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000, 0x20, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x20) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) write$apparmor_exec(r2, &(0x7f0000000200)={'exec ', '/proc/thread-self/attr/exec\x00 \x16J\xc7\xec\xc2\xef\xbe\xa2\xa4\xbc\x03\xc1\xc3\xda\xbfk#\x9b\x819\x18\xdd\xf4\xed\x9c\xd9\x80\x9f$,n\xfe\x11\xbc\xcd\xdd\x9a\x1c+\xe17\xbe\x91\xaaE\xeeL\t\xa7\xa7.\xba\x88\xa0\x92\xf2\xca\x94]\x96\xe08\xe1\vU\xc0\x94\xcb\xd9a ?\x04:\xd1\xfc\xa8\x18C\x7f`\x89!2\x8b+\avh\x96=e\x1b\xd6\xfb\xc3\x90\x9eUI(w\xcfeh\xa4\x87\xedu\x99G\x12\xa2\xcf\x06\x03Q\xef\t\xd5q\xcd\x13:\xa0\"jz\xc9\xde<\v\xa6\xe5S\xb6\xcb\xe4\xaf\xd2\xec\xd3p\x91\x96\t\x9d\x9f\x05>\xcbF\x1c&\x8a\xce\xaf\bs\xb9 \x02\xfdg\xe0\x05'}, 0xc8) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:33 executing program 1: r0 = socket(0x22, 0x3, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0xc, 0x8, {0x53, 0x5, 0xbd, {0x0, 0x5}, {0x400, 0x9f2e}, @rumble={0x3ff0, 0x1cc}}, {0x51, 0x1ff, 0x1f, {0x571, 0xb222}, {0x0, 0x8}, @rumble={0x315c, 0xffe1}}}) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) accept$packet(r0, 0x0, 0x0) socket(0x22, 0x3, 0x0) (async) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0xc, 0x8, {0x53, 0x5, 0xbd, {0x0, 0x5}, {0x400, 0x9f2e}, @rumble={0x3ff0, 0x1cc}}, {0x51, 0x1ff, 0x1f, {0x571, 0xb222}, {0x0, 0x8}, @rumble={0x315c, 0xffe1}}}) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:33 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 19:39:33 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) recvfrom$packet(r0, &(0x7f0000000000)=""/155, 0x9b, 0x40002020, &(0x7f00000000c0)={0x11, 0x15, r2, 0x1, 0xb9, 0x6, @multicast}, 0x14) 19:39:33 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4000880) 19:39:33 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz0\x00') 19:39:33 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, 0x3}, 0x6) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000815}, 0x88c0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:33 executing program 2: socket$inet(0x2, 0xa, 0x1) 19:39:33 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4000880) 19:39:33 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) recvfrom$packet(r0, &(0x7f0000000000)=""/155, 0x9b, 0x40002020, &(0x7f00000000c0)={0x11, 0x15, r2, 0x1, 0xb9, 0x6, @multicast}, 0x14) socket(0x25, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) recvfrom$packet(r0, &(0x7f0000000000)=""/155, 0x9b, 0x40002020, &(0x7f00000000c0)={0x11, 0x15, r2, 0x1, 0xb9, 0x6, @multicast}, 0x14) (async) 19:39:33 executing program 1: r0 = socket(0x22, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) accept$packet(r0, 0x0, 0x0) 19:39:33 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, 0x3}, 0x6) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000815}, 0x88c0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:33 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz0\x00') 19:39:33 executing program 2: socket$inet(0x2, 0xa, 0x1) 19:39:33 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4000880) 19:39:33 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, 0x3}, 0x6) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000815}, 0x88c0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:33 executing program 1: r0 = socket(0x22, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) accept$packet(r0, 0x0, 0x0) 19:39:33 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) recvfrom$packet(r0, &(0x7f0000000000)=""/155, 0x9b, 0x40002020, &(0x7f00000000c0)={0x11, 0x15, r2, 0x1, 0xb9, 0x6, @multicast}, 0x14) 19:39:33 executing program 2: socket$inet(0x2, 0xa, 0x1) 19:39:33 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz0\x00') 19:39:33 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc080}, 0x0) 19:39:33 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x3ff, {0x7, 0x2, 0x8, 0x0, 0x9, 0x16b80b64}}) 19:39:34 executing program 1: r0 = socket(0x22, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) accept$packet(r0, 0x0, 0x0) socket(0x22, 0x3, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:34 executing program 3: r0 = socket(0xb, 0x800, 0x9) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:34 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc080}, 0x0) 19:39:34 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7, 0x4442) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 19:39:34 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xff, 0x8, 0x20, @private1, @mcast2, 0x0, 0x80, 0xff, 0x3}}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x802c1, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000040)={0x0, 0x2}) 19:39:34 executing program 3: r0 = socket(0xb, 0x800, 0x9) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket(0xb, 0x800, 0x9) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) 19:39:34 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}]}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xff, 0x8, 0x20, @private1, @mcast2, 0x0, 0x80, 0xff, 0x3}}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x802c1, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000040)={0x0, 0x2}) 19:39:34 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) 19:39:34 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x3ff, {0x7, 0x2, 0x8, 0x0, 0x9, 0x16b80b64}}) 19:39:34 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc080}, 0x0) 19:39:34 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7, 0x4442) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 19:39:34 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x3ff, {0x7, 0x2, 0x8, 0x0, 0x9, 0x16b80b64}}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x3ff, {0x7, 0x2, 0x8, 0x0, 0x9, 0x16b80b64}}) (async) 19:39:34 executing program 2: socket$inet(0x2, 0x2, 0x1) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}]}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xff, 0x8, 0x20, @private1, @mcast2, 0x0, 0x80, 0xff, 0x3}}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x802c1, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000040)={0x0, 0x2}) 19:39:34 executing program 3: r0 = socket(0xb, 0x800, 0x9) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:34 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:34 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket(0x25, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fe7e94615a661f651e1b3afd076ef47ebc8df176888a20b04675b0bac87822fe"}]}, 0x38}}, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x3849a10deff93734) 19:39:34 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7, 0x4442) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) syz_open_dev$media(&(0x7f0000000040), 0x7, 0x4442) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) (async) 19:39:34 executing program 2: socket$inet(0x2, 0x2, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) 19:39:34 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x2, @dev={0xac, 0x14, 0x14, 0x39}, 0x4e20, 0x2, 'nq\x00', 0x20, 0x40, 0x10}, 0x2c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x24}}, 0x4010) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:34 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:34 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000040)=[@exit_looper, @free_buffer={0x40086303, r1}, @increfs={0x40046304, 0x1}], 0x43, 0x0, &(0x7f0000000080)="93df8b3ac1731e706b7041c8c9d28653232c29310f484cfb72a703a0d6f24fe36a3a1a0079d3d506c8315545bd36eaaaf0feddcc5affbc65bd5e96114a7438d20729bc"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:34 executing program 2: socket$inet(0x2, 0x2, 0x1) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) 19:39:34 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:34 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r0 = socket(0x25, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fe7e94615a661f651e1b3afd076ef47ebc8df176888a20b04675b0bac87822fe"}]}, 0x38}}, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x3849a10deff93734) 19:39:34 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000040)=[@exit_looper, @free_buffer={0x40086303, r1}, @increfs={0x40046304, 0x1}], 0x43, 0x0, &(0x7f0000000080)="93df8b3ac1731e706b7041c8c9d28653232c29310f484cfb72a703a0d6f24fe36a3a1a0079d3d506c8315545bd36eaaaf0feddcc5affbc65bd5e96114a7438d20729bc"}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:34 executing program 1: r0 = socket(0x15, 0x1, 0x0) accept$packet(r0, 0x0, 0x0) 19:39:34 executing program 2: socket$inet(0x2, 0x2, 0x1) (async, rerun: 64) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) (rerun: 64) 19:39:34 executing program 3: r0 = socket(0x25, 0x5, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x2, @dev={0xac, 0x14, 0x14, 0x39}, 0x4e20, 0x2, 'nq\x00', 0x20, 0x40, 0x10}, 0x2c) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x24}}, 0x4010) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (rerun: 64) 19:39:34 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:34 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r0 = socket(0x25, 0x5, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fe7e94615a661f651e1b3afd076ef47ebc8df176888a20b04675b0bac87822fe"}]}, 0x38}}, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x3849a10deff93734) 19:39:34 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000040)=[@exit_looper, @free_buffer={0x40086303, r1}, @increfs={0x40046304, 0x1}], 0x43, 0x0, &(0x7f0000000080)="93df8b3ac1731e706b7041c8c9d28653232c29310f484cfb72a703a0d6f24fe36a3a1a0079d3d506c8315545bd36eaaaf0feddcc5affbc65bd5e96114a7438d20729bc"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000040)=[@exit_looper, @free_buffer={0x40086303, r1}, @increfs={0x40046304, 0x1}], 0x43, 0x0, &(0x7f0000000080)="93df8b3ac1731e706b7041c8c9d28653232c29310f484cfb72a703a0d6f24fe36a3a1a0079d3d506c8315545bd36eaaaf0feddcc5affbc65bd5e96114a7438d20729bc"}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:34 executing program 1: r0 = socket(0x15, 0x1, 0x0) accept$packet(r0, 0x0, 0x0) socket(0x15, 0x1, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:34 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x2, @dev={0xac, 0x14, 0x14, 0x39}, 0x4e20, 0x2, 'nq\x00', 0x20, 0x40, 0x10}, 0x2c) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x24}}, 0x4010) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:34 executing program 2: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x94}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) socket$inet(0x2, 0x2, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) 19:39:34 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 19:39:34 executing program 1: r0 = socket(0x15, 0x1, 0x0) accept$packet(r0, 0x0, 0x0) socket(0x15, 0x1, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) 19:39:34 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x2710}, 0x2, 0x4508, 0x8001}, 0x18) 19:39:34 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket(0x25, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fe7e94615a661f651e1b3afd076ef47ebc8df176888a20b04675b0bac87822fe"}]}, 0x38}}, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x3849a10deff93734) 19:39:34 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = accept4$packet(r0, 0x0, &(0x7f0000000000), 0x80000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x2e, @multicast}, 0x10) 19:39:34 executing program 2: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x94}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) (async) socket$inet(0x2, 0x2, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) 19:39:34 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socketpair(0x25, 0x7, 0x0, &(0x7f0000000000)) 19:39:34 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket(0x25, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fe7e94615a661f651e1b3afd076ef47ebc8df176888a20b04675b0bac87822fe"}]}, 0x38}}, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x3849a10deff93734) 19:39:34 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19:39:34 executing program 2: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x94}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) socket$inet(0x2, 0x2, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x94}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) (async) socket$inet(0x2, 0x2, 0x1) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) (async) 19:39:34 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x2710}, 0x2, 0x4508, 0x8001}, 0x18) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x2710}, 0x2, 0x4508, 0x8001}, 0x18) (async) 19:39:34 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socketpair(0x25, 0x7, 0x0, &(0x7f0000000000)) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) socketpair(0x25, 0x7, 0x0, &(0x7f0000000000)) (async) 19:39:34 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r1 = accept4$packet(r0, 0x0, &(0x7f0000000000), 0x80000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x2e, @multicast}, 0x10) 19:39:34 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket(0x25, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fe7e94615a661f651e1b3afd076ef47ebc8df176888a20b04675b0bac87822fe"}]}, 0x38}}, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x3849a10deff93734) 19:39:34 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19:39:34 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="20002bbd7000ffdbdf2508000000060028000300000008003b000600000005002e0000000000113fdb317bd28dc2e2e114e0895f93318a44083d6166a28c725c5be7d5c148ba77445fe93f1fb6faa48bb9e0cdb2254d934d23cb9d7b70f6bafcabe2ebabcfe88cd40e5323cd1137f47ad9a55a020cb3c55a21810d9f3f60d90797646dac268d24c1ecbdcc6958db8857a5e6e06f67e71789a4aa8a07c1fbc74ef25b"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 19:39:34 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x2710}, 0x2, 0x4508, 0x8001}, 0x18) 19:39:34 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r1 = accept4$packet(r0, 0x0, &(0x7f0000000000), 0x80000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x2e, @multicast}, 0x10) 19:39:34 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socketpair(0x25, 0x7, 0x0, &(0x7f0000000000)) 19:39:34 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket(0x25, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fe7e94615a661f651e1b3afd076ef47ebc8df176888a20b04675b0bac87822fe"}]}, 0x38}}, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) 19:39:34 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19:39:34 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) 19:39:34 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket(0x15, 0x80000, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x26, r3, 0x1, 0x5}, 0x14) 19:39:34 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="20002bbd7000ffdbdf2508000000060028000300000008003b000600000005002e0000000000113fdb317bd28dc2e2e114e0895f93318a44083d6166a28c725c5be7d5c148ba77445fe93f1fb6faa48bb9e0cdb2254d934d23cb9d7b70f6bafcabe2ebabcfe88cd40e5323cd1137f47ad9a55a020cb3c55a21810d9f3f60d90797646dac268d24c1ecbdcc6958db8857a5e6e06f67e71789a4aa8a07c1fbc74ef25b"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 19:39:34 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) getsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:39:34 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) (async) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) 19:39:34 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair(0x25, 0x5, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x15, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) 19:39:34 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket(0x15, 0x80000, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x26, r3, 0x1, 0x5}, 0x14) socket(0x25, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) (async) socket(0x15, 0x80000, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x26, r3, 0x1, 0x5}, 0x14) (async) 19:39:34 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket(0x25, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fe7e94615a661f651e1b3afd076ef47ebc8df176888a20b04675b0bac87822fe"}]}, 0x38}}, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:34 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) getsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x22, 0x3, 0x0) (async) accept$packet(r0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async) getsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 19:39:34 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="20002bbd7000ffdbdf2508000000060028000300000008003b000600000005002e0000000000113fdb317bd28dc2e2e114e0895f93318a44083d6166a28c725c5be7d5c148ba77445fe93f1fb6faa48bb9e0cdb2254d934d23cb9d7b70f6bafcabe2ebabcfe88cd40e5323cd1137f47ad9a55a020cb3c55a21810d9f3f60d90797646dac268d24c1ecbdcc6958db8857a5e6e06f67e71789a4aa8a07c1fbc74ef25b"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="20002bbd7000ffdbdf2508000000060028000300000008003b000600000005002e0000000000113fdb317bd28dc2e2e114e0895f93318a44083d6166a28c725c5be7d5c148ba77445fe93f1fb6faa48bb9e0cdb2254d934d23cb9d7b70f6bafcabe2ebabcfe88cd40e5323cd1137f47ad9a55a020cb3c55a21810d9f3f60d90797646dac268d24c1ecbdcc6958db8857a5e6e06f67e71789a4aa8a07c1fbc74ef25b"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) 19:39:34 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair(0x25, 0x5, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x15, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) 19:39:34 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket(0x25, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:34 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) 19:39:35 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async) getsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:39:35 executing program 2: socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0x80000, 0x80) 19:39:35 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket(0x15, 0x80000, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x26, r3, 0x1, 0x5}, 0x14) 19:39:35 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) socketpair(0x25, 0x5, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x15, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) 19:39:35 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket(0x25, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:35 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:35 executing program 1: r0 = socket(0x22, 0x3, 0x0) accept$packet(r0, 0x0, 0x0) socketpair(0x25, 0x7, 0x0, &(0x7f0000000000)) 19:39:35 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) getpeername$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x20) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0x18, 0x2, 0x8, 0x81, 0xdb97, 0xfffffffffffffe01}, &(0x7f0000000200)={0x1, 0x800, 0x0, 0x6, 0xe, 0x4}, &(0x7f0000000240)={0x35a1, 0x7, 0x8454, 0x1, 0x3, 0x3, 0x5, 0x7}, &(0x7f0000000280)) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) 19:39:35 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket(0x25, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:35 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:35 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab080, 0x0) socket$inet(0x2, 0xa, 0x6d) getsockname$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:35 executing program 1: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:35 executing program 2: socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0x80000, 0x80) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0x80000, 0x80) (async) 19:39:35 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:35 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) getpeername$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x20) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0x18, 0x2, 0x8, 0x81, 0xdb97, 0xfffffffffffffe01}, &(0x7f0000000200)={0x1, 0x800, 0x0, 0x6, 0xe, 0x4}, &(0x7f0000000240)={0x35a1, 0x7, 0x8454, 0x1, 0x3, 0x3, 0x5, 0x7}, &(0x7f0000000280)) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) 19:39:35 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab080, 0x0) (async) socket$inet(0x2, 0xa, 0x6d) getsockname$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:35 executing program 1: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:35 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:35 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) getpeername$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x20) (async) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0x18, 0x2, 0x8, 0x81, 0xdb97, 0xfffffffffffffe01}, &(0x7f0000000200)={0x1, 0x800, 0x0, 0x6, 0xe, 0x4}, &(0x7f0000000240)={0x35a1, 0x7, 0x8454, 0x1, 0x3, 0x3, 0x5, 0x7}, &(0x7f0000000280)) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f0000000180), 0x80) 19:39:35 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:35 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab080, 0x0) socket$inet(0x2, 0xa, 0x6d) (async) getsockname$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) (async, rerun: 32) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 32) 19:39:35 executing program 1: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:35 executing program 3: r0 = socket(0x25, 0xa, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:35 executing program 2: socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0x80000, 0x80) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0x80000, 0x80) (async) 19:39:35 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x40040000) socketpair(0x1e, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc009}, 0x4805) 19:39:35 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 19:39:35 executing program 1: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:35 executing program 3: r0 = socket(0x25, 0xa, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:35 executing program 1: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:35 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:35 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) 19:39:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x40040000) (async) socketpair(0x1e, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc009}, 0x4805) 19:39:35 executing program 3: r0 = socket(0x25, 0xa, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:35 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:35 executing program 2: socket$inet(0x2, 0x2, 0x1) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3a02c5401c36a998}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44054}, 0x840) 19:39:35 executing program 1: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:35 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 19:39:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x40040000) socketpair(0x1e, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc009}, 0x4805) 19:39:35 executing program 2: socket$inet(0x2, 0x2, 0x1) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3a02c5401c36a998}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44054}, 0x840) 19:39:35 executing program 3: set_robust_list(&(0x7f00000000c0)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x439, &(0x7f0000000080)}, 0x18) r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:35 executing program 4: r0 = socket(0x0, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:35 executing program 1: socket(0x25, 0x5, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:35 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = geteuid() r1 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="b7c0782f9651295dd1562a822bfcbad8c0fa083f99d75d565ae3e70d978e5618032020d739285096f304b388dfd65a0ded4981b6a20ac829f72a0f8ff9d858d358d0253f19c1ba10a31712960bc2aa69b7cdcee1c6cc0d84597ece4ee31229681cc8eb8c3bc043a3c1d73840789e75dd80f51bdc2cdc9d3fa89757", 0x7b, 0xfffffffffffffffe) keyctl$chown(0x4, r1, r0, 0xee00) 19:39:35 executing program 3: set_robust_list(&(0x7f00000000c0)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x439, &(0x7f0000000080)}, 0x18) (async) r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:35 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:35 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = geteuid() r1 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="b7c0782f9651295dd1562a822bfcbad8c0fa083f99d75d565ae3e70d978e5618032020d739285096f304b388dfd65a0ded4981b6a20ac829f72a0f8ff9d858d358d0253f19c1ba10a31712960bc2aa69b7cdcee1c6cc0d84597ece4ee31229681cc8eb8c3bc043a3c1d73840789e75dd80f51bdc2cdc9d3fa89757", 0x7b, 0xfffffffffffffffe) keyctl$chown(0x4, r1, r0, 0xee00) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) geteuid() (async) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="b7c0782f9651295dd1562a822bfcbad8c0fa083f99d75d565ae3e70d978e5618032020d739285096f304b388dfd65a0ded4981b6a20ac829f72a0f8ff9d858d358d0253f19c1ba10a31712960bc2aa69b7cdcee1c6cc0d84597ece4ee31229681cc8eb8c3bc043a3c1d73840789e75dd80f51bdc2cdc9d3fa89757", 0x7b, 0xfffffffffffffffe) (async) keyctl$chown(0x4, r1, r0, 0xee00) (async) 19:39:35 executing program 2: socket$inet(0x2, 0x2, 0x1) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3a02c5401c36a998}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44054}, 0x840) (rerun: 64) 19:39:35 executing program 4: r0 = socket(0x0, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:35 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:35 executing program 2: socket$inet(0x2, 0x6, 0xe6bb) 19:39:35 executing program 3: set_robust_list(&(0x7f00000000c0)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x439, &(0x7f0000000080)}, 0x18) r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:35 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:35 executing program 4: r0 = socket(0x0, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:35 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = geteuid() r1 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="b7c0782f9651295dd1562a822bfcbad8c0fa083f99d75d565ae3e70d978e5618032020d739285096f304b388dfd65a0ded4981b6a20ac829f72a0f8ff9d858d358d0253f19c1ba10a31712960bc2aa69b7cdcee1c6cc0d84597ece4ee31229681cc8eb8c3bc043a3c1d73840789e75dd80f51bdc2cdc9d3fa89757", 0x7b, 0xfffffffffffffffe) keyctl$chown(0x4, r1, r0, 0xee00) 19:39:35 executing program 2: socket$inet(0x2, 0x6, 0xe6bb) 19:39:35 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) r0 = socket(0x25, 0x5, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3cd5f8e6810b6c47}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002bbd7000fbdbdf25030000000500370000000848fb47a4e094906867873a5ed444bf0000641f2d9bc0aed003a16e46f0076ac5488114c0771d927261684cef72065a75d6954ba2590b24b527f5a7dda696e9b30294a4de0e76cde50e9f8a82cdd8df5d417c357c6bd494bda792645f0358810e3529fb9b4103be657713b2b64a0af0fed5f9abd2e4be232bd7f678dc35e4aa500cc7a217f2916980b4"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) socketpair(0x1d, 0x3, 0x8c3, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000300)=0xffff, 0x4) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) 19:39:35 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3f) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'stack ', '\x03\x00)\x00'}, 0xa) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:35 executing program 2: socket$inet(0x2, 0x6, 0xe6bb) 19:39:35 executing program 4: r0 = socket(0x25, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:36 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:36 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) r0 = socket(0x25, 0x5, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3cd5f8e6810b6c47}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002bbd7000fbdbdf25030000000500370000000848fb47a4e094906867873a5ed444bf0000641f2d9bc0aed003a16e46f0076ac5488114c0771d927261684cef72065a75d6954ba2590b24b527f5a7dda696e9b30294a4de0e76cde50e9f8a82cdd8df5d417c357c6bd494bda792645f0358810e3529fb9b4103be657713b2b64a0af0fed5f9abd2e4be232bd7f678dc35e4aa500cc7a217f2916980b4"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) socketpair(0x1d, 0x3, 0x8c3, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000300)=0xffff, 0x4) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) (async) socket(0x25, 0x5, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3cd5f8e6810b6c47}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002bbd7000fbdbdf25030000000500370000000848fb47a4e094906867873a5ed444bf0000641f2d9bc0aed003a16e46f0076ac5488114c0771d927261684cef72065a75d6954ba2590b24b527f5a7dda696e9b30294a4de0e76cde50e9f8a82cdd8df5d417c357c6bd494bda792645f0358810e3529fb9b4103be657713b2b64a0af0fed5f9abd2e4be232bd7f678dc35e4aa500cc7a217f2916980b4"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) socketpair(0x1d, 0x3, 0x8c3, &(0x7f0000000000)) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000300)=0xffff, 0x4) (async) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) 19:39:36 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:36 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3f) (async) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000000c0)={'stack ', '\x03\x00)\x00'}, 0xa) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:36 executing program 2: socket$inet(0x2, 0x80006, 0x401ff) 19:39:36 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:36 executing program 4: r0 = socket(0x25, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:36 executing program 4: r0 = socket(0x25, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:36 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:36 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) r0 = socket(0x25, 0x5, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3cd5f8e6810b6c47}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002bbd7000fbdbdf25030000000500370000000848fb47a4e094906867873a5ed444bf0000641f2d9bc0aed003a16e46f0076ac5488114c0771d927261684cef72065a75d6954ba2590b24b527f5a7dda696e9b30294a4de0e76cde50e9f8a82cdd8df5d417c357c6bd494bda792645f0358810e3529fb9b4103be657713b2b64a0af0fed5f9abd2e4be232bd7f678dc35e4aa500cc7a217f2916980b4"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) socketpair(0x1d, 0x3, 0x8c3, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000300)=0xffff, 0x4) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) (async) socket(0x25, 0x5, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3cd5f8e6810b6c47}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002bbd7000fbdbdf25030000000500370000000848fb47a4e094906867873a5ed444bf0000641f2d9bc0aed003a16e46f0076ac5488114c0771d927261684cef72065a75d6954ba2590b24b527f5a7dda696e9b30294a4de0e76cde50e9f8a82cdd8df5d417c357c6bd494bda792645f0358810e3529fb9b4103be657713b2b64a0af0fed5f9abd2e4be232bd7f678dc35e4aa500cc7a217f2916980b4"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) socketpair(0x1d, 0x3, 0x8c3, &(0x7f0000000000)) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000300)=0xffff, 0x4) (async) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) 19:39:36 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3f) (async) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'stack ', '\x03\x00)\x00'}, 0xa) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:36 executing program 2: socket$inet(0x2, 0x80006, 0x401ff) 19:39:36 executing program 4: socket(0x25, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:36 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:36 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 19:39:36 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x9369ab59f5bb0572}, 0x24000001) 19:39:36 executing program 2: socket$inet(0x2, 0x80006, 0x401ff) socket$inet(0x2, 0x80006, 0x401ff) (async) 19:39:36 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 19:39:36 executing program 4: socket(0x25, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:36 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x9369ab59f5bb0572}, 0x24000001) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x9369ab59f5bb0572}, 0x24000001) (async) 19:39:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 19:39:36 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 19:39:36 executing program 2: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) socket$inet(0x2, 0x2, 0x1) 19:39:36 executing program 5: ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0xd, 0x75bb, 0x7}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x6) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x4, 0x2, 0x10, 0x5}, 'syz0\x00', 0x3e}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 19:39:36 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x9369ab59f5bb0572}, 0x24000001) 19:39:36 executing program 2: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) socket$inet(0x2, 0x2, 0x1) 19:39:36 executing program 4: socket(0x25, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:36 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) (rerun: 32) 19:39:36 executing program 5: ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0xd, 0x75bb, 0x7}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x6) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x4, 0x2, 0x10, 0x5}, 'syz0\x00', 0x3e}) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 19:39:36 executing program 2: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) socket$inet(0x2, 0x2, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) (async) socket$inet(0x2, 0x2, 0x1) (async) 19:39:36 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={0x0, 0x2}) 19:39:36 executing program 5: ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0xd, 0x75bb, 0x7}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x6) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x4, 0x2, 0x10, 0x5}, 'syz0\x00', 0x3e}) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:36 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) 19:39:36 executing program 2: socket$inet(0x2, 0x6, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x68c201, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f00000000c0)=0x10001, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 19:39:36 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) (async) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) (async) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={0x0, 0x2}) [ 1317.556405] audit: type=1400 audit(1658864376.545:49): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=15459 comm="syz-executor.0" 19:39:36 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) 19:39:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) 19:39:36 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) (async) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) (async) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={0x0, 0x2}) 19:39:36 executing program 3: r0 = socket(0x28, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) [ 1317.636160] audit: type=1400 audit(1658864376.625:50): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=15469 comm="syz-executor.0" 19:39:36 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:36 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) 19:39:36 executing program 2: socket$inet(0x2, 0x6, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x68c201, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f00000000c0)=0x10001, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket$inet(0x2, 0x6, 0x1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x68c201, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f00000000c0)=0x10001, 0x4) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) 19:39:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) 19:39:36 executing program 3: r0 = socket(0x28, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:36 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={0x0, 0x2}) [ 1317.754628] audit: type=1400 audit(1658864376.735:51): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=15491 comm="syz-executor.0" 19:39:36 executing program 3: r0 = socket(0x28, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:36 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:36 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000002c0)={r1, &(0x7f0000000240)=""/82}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x1c}}, 0x4048880) 19:39:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) 19:39:36 executing program 2: socket$inet(0x2, 0x6, 0x1) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x68c201, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async, rerun: 64) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f00000000c0)=0x10001, 0x4) (async, rerun: 64) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 19:39:36 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000000)="78fc671cbc41e5cb6772997be5f4472dd04ccae6d5b24c9893a930e7ce866cd6f1ff9f210e4b73052ee765d498d666cec75abf2569a35053866cfc1d8494686edec0b67416f258558f0eb4418cd9ab627d2b9333efc51a87e8d7c20fccfd8ed4c59c063f4ed914f099a09f249db8bbc5c5ca7399c8f1576904b137b3fa83510e05fcdfd81c6447c68818274aa7", 0x8d, 0x200000c1, &(0x7f00000000c0)={0x11, 0xf6, 0x0, 0x1, 0x3f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r2 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0xc0000) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) 19:39:36 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:36 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000002c0)={r1, &(0x7f0000000240)=""/82}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x1c}}, 0x4048880) 19:39:36 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={0x0, 0x2}) 19:39:36 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) sendto$packet(r1, &(0x7f0000000000)="78fc671cbc41e5cb6772997be5f4472dd04ccae6d5b24c9893a930e7ce866cd6f1ff9f210e4b73052ee765d498d666cec75abf2569a35053866cfc1d8494686edec0b67416f258558f0eb4418cd9ab627d2b9333efc51a87e8d7c20fccfd8ed4c59c063f4ed914f099a09f249db8bbc5c5ca7399c8f1576904b137b3fa83510e05fcdfd81c6447c68818274aa7", 0x8d, 0x200000c1, &(0x7f00000000c0)={0x11, 0xf6, 0x0, 0x1, 0x3f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) r2 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0xc0000) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) 19:39:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) [ 1317.921965] audit: type=1400 audit(1658864376.905:52): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=15511 comm="syz-executor.4" 19:39:36 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0xa, 0x1000, {0x54, 0x8, 0xfff9, {0x40}, {0x8, 0x200}, @const={0x7, {0x6, 0xcc, 0x0, 0x7e}}}, {0x54, 0x50, 0x20, {0x0, 0x20}, {0x4, 0x1ff}, @ramp={0x1, 0xc38, {0x37, 0x4, 0x1, 0xfff}}}}) socket$inet(0x2, 0x2, 0x1) 19:39:37 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:37 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000000)="78fc671cbc41e5cb6772997be5f4472dd04ccae6d5b24c9893a930e7ce866cd6f1ff9f210e4b73052ee765d498d666cec75abf2569a35053866cfc1d8494686edec0b67416f258558f0eb4418cd9ab627d2b9333efc51a87e8d7c20fccfd8ed4c59c063f4ed914f099a09f249db8bbc5c5ca7399c8f1576904b137b3fa83510e05fcdfd81c6447c68818274aa7", 0x8d, 0x200000c1, &(0x7f00000000c0)={0x11, 0xf6, 0x0, 0x1, 0x3f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r2 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0xc0000) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) socket(0x25, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) sendto$packet(r1, &(0x7f0000000000)="78fc671cbc41e5cb6772997be5f4472dd04ccae6d5b24c9893a930e7ce866cd6f1ff9f210e4b73052ee765d498d666cec75abf2569a35053866cfc1d8494686edec0b67416f258558f0eb4418cd9ab627d2b9333efc51a87e8d7c20fccfd8ed4c59c063f4ed914f099a09f249db8bbc5c5ca7399c8f1576904b137b3fa83510e05fcdfd81c6447c68818274aa7", 0x8d, 0x200000c1, &(0x7f00000000c0)={0x11, 0xf6, 0x0, 0x1, 0x3f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0xc0000) (async) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) (async) 19:39:37 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000002c0)={r1, &(0x7f0000000240)=""/82}) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x1c}}, 0x4048880) 19:39:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 19:39:37 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={0x0, 0x2}) 19:39:37 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0xa, 0x1000, {0x54, 0x8, 0xfff9, {0x40}, {0x8, 0x200}, @const={0x7, {0x6, 0xcc, 0x0, 0x7e}}}, {0x54, 0x50, 0x20, {0x0, 0x20}, {0x4, 0x1ff}, @ramp={0x1, 0xc38, {0x37, 0x4, 0x1, 0xfff}}}}) (async, rerun: 32) socket$inet(0x2, 0x2, 0x1) (rerun: 32) [ 1318.042313] audit: type=1400 audit(1658864377.025:53): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=15551 comm="syz-executor.4" 19:39:37 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:37 executing program 3: r0 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x29, 0x7, 0x7, 0xfff, 0x33, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x80, 0x7, 0x7fffffff}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040840}, 0x5081) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x101}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf800}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xc000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a9935174b3d"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8044}, 0x4000001) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 19:39:37 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 19:39:37 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:37 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:37 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0xa, 0x1000, {0x54, 0x8, 0xfff9, {0x40}, {0x8, 0x200}, @const={0x7, {0x6, 0xcc, 0x0, 0x7e}}}, {0x54, 0x50, 0x20, {0x0, 0x20}, {0x4, 0x1ff}, @ramp={0x1, 0xc38, {0x37, 0x4, 0x1, 0xfff}}}}) socket$inet(0x2, 0x2, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0xa, 0x1000, {0x54, 0x8, 0xfff9, {0x40}, {0x8, 0x200}, @const={0x7, {0x6, 0xcc, 0x0, 0x7e}}}, {0x54, 0x50, 0x20, {0x0, 0x20}, {0x4, 0x1ff}, @ramp={0x1, 0xc38, {0x37, 0x4, 0x1, 0xfff}}}}) (async) socket$inet(0x2, 0x2, 0x1) (async) [ 1318.179420] audit: type=1400 audit(1658864377.145:54): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=15570 comm="syz-executor.4" 19:39:37 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) socket(0x27, 0x800, 0x7fff) 19:39:37 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) 19:39:37 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) [ 1318.250102] audit: type=1400 audit(1658864377.205:55): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=15593 comm="syz-executor.4" 19:39:37 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:37 executing program 3: r0 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x29, 0x7, 0x7, 0xfff, 0x33, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x80, 0x7, 0x7fffffff}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040840}, 0x5081) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x101}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf800}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xc000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a9935174b3d"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8044}, 0x4000001) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 19:39:37 executing program 2: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x2400c881) 19:39:37 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) 19:39:37 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) [ 1318.348104] audit: type=1400 audit(1658864377.335:56): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=15603 comm="syz-executor.4" 19:39:37 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:37 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 19:39:37 executing program 2: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x2400c881) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x2400c881) (async) 19:39:37 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) [ 1318.427408] audit: type=1400 audit(1658864377.355:57): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=15610 comm="syz-executor.1" 19:39:37 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:37 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:37 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24002080) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:37 executing program 2: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x2400c881) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x2400c881) (async) 19:39:37 executing program 3: r0 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x29, 0x7, 0x7, 0xfff, 0x33, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x80, 0x7, 0x7fffffff}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040840}, 0x5081) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x101}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf800}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xc000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5a9935174b3d"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8044}, 0x4000001) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) [ 1318.509373] audit: type=1400 audit(1658864377.445:58): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=15625 comm="syz-executor.4" 19:39:37 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:37 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) socket(0x27, 0x800, 0x7fff) 19:39:37 executing program 2: socket$inet(0x2, 0x2, 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4040040) 19:39:37 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:37 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24002080) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:37 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) socket(0x27, 0x800, 0x7fff) 19:39:37 executing program 3: r0 = socket(0x1f, 0x1, 0x24000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:37 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:37 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x40001) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000340)=[{0x0, 0x80000000}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x7, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000005c0)={{0x80000000, r3, 0x4, [0x5, 0x3]}, {0x80000000, 0x0, 0x4, [0x8]}, 0x2, [0xfffffffa, 0x7]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) keyctl$revoke(0x3, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x8) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x181400, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x80000000}], 0x4, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000880)=[{}, {}, {}], 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000bc0)={r1, &(0x7f0000000b00), &(0x7f0000000b40)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000c00)={{r5, r6, 0x3, [0x32b, 0x2]}, {r1, r2, 0x3, [0x7, 0x9]}, 0x4, [0xf4c2, 0x3]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:37 executing program 2: socket$inet(0x2, 0x2, 0x1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4040040) 19:39:37 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24002080) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) 19:39:37 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) socket(0x27, 0x800, 0x7fff) 19:39:37 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:37 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x40001) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000340)=[{0x0, 0x80000000}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x7, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000005c0)={{0x80000000, r3, 0x4, [0x5, 0x3]}, {0x80000000, 0x0, 0x4, [0x8]}, 0x2, [0xfffffffa, 0x7]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) keyctl$revoke(0x3, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x8) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x181400, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x80000000}], 0x4, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000880)=[{}, {}, {}], 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000bc0)={r1, &(0x7f0000000b00), &(0x7f0000000b40)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000c00)={{r5, r6, 0x3, [0x32b, 0x2]}, {r1, r2, 0x3, [0x7, 0x9]}, 0x4, [0xf4c2, 0x3]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x7, 0x40001) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000005c0)={{0x80000000, r3, 0x4, [0x5, 0x3]}, {0x80000000, 0x0, 0x4, [0x8]}, 0x2, [0xfffffffa, 0x7]}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) keyctl$revoke(0x3, 0x0) (async) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x8) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x181400, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000640)=[{}], 0x4, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000880)=[{}, {}, {}], 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000bc0)={r1, &(0x7f0000000b00), &(0x7f0000000b40)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000c00)={{r5, r6, 0x3, [0x32b, 0x2]}, {r1, r2, 0x3, [0x7, 0x9]}, 0x4, [0xf4c2, 0x3]}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:37 executing program 2: socket$inet(0x2, 0x2, 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4040040) 19:39:37 executing program 3: r0 = socket(0x1f, 0x1, 0x24000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:37 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:37 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:37 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:37 executing program 2: r0 = socket$inet(0x2, 0x2, 0x1) getpeername$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x1) 19:39:37 executing program 3: r0 = socket(0x1f, 0x1, 0x24000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:37 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x40001) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000340)=[{0x0, 0x80000000}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x7, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000005c0)={{0x80000000, r3, 0x4, [0x5, 0x3]}, {0x80000000, 0x0, 0x4, [0x8]}, 0x2, [0xfffffffa, 0x7]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) keyctl$revoke(0x3, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x8) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x181400, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x80000000}], 0x4, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000880)=[{}, {}, {}], 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000bc0)={r1, &(0x7f0000000b00), &(0x7f0000000b40)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000c00)={{r5, r6, 0x3, [0x32b, 0x2]}, {r1, r2, 0x3, [0x7, 0x9]}, 0x4, [0xf4c2, 0x3]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x7, 0x40001) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000005c0)={{0x80000000, r3, 0x4, [0x5, 0x3]}, {0x80000000, 0x0, 0x4, [0x8]}, 0x2, [0xfffffffa, 0x7]}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) keyctl$revoke(0x3, 0x0) (async) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x8) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x181400, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000640)=[{}], 0x4, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000880)=[{}, {}, {}], 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000bc0)={r1, &(0x7f0000000b00), &(0x7f0000000b40)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000c00)={{r5, r6, 0x3, [0x32b, 0x2]}, {r1, r2, 0x3, [0x7, 0x9]}, 0x4, [0xf4c2, 0x3]}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:37 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:37 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:37 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:37 executing program 2: r0 = socket$inet(0x2, 0x2, 0x1) getpeername$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x1) 19:39:38 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "ddb209e1767b1e67e97c9aa34f22a90aafa8ddc4e317a100b93b274a7f72aa828952deac328919dc0258128c56619ab50568e32d7653612f514bf04b6aa38314", 0x1e}, 0x48, 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "2138b011c2fc78ab4a4ff5a851c664bf54365ef0384499c4fcb5a4f06bb4b34dc84cd1d2f3b02a39f3c8a265a6b5c4a1b5691d6c7c790000000100", 0x13}, 0x48, r0) r1 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='^(&,)#\\\x00', 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$unlink(0x9, 0x0, r2) r3 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) 19:39:38 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) 19:39:38 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:38 executing program 2: r0 = socket$inet(0x2, 0x2, 0x1) getpeername$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x1) 19:39:38 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:38 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "ddb209e1767b1e67e97c9aa34f22a90aafa8ddc4e317a100b93b274a7f72aa828952deac328919dc0258128c56619ab50568e32d7653612f514bf04b6aa38314", 0x1e}, 0x48, 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "2138b011c2fc78ab4a4ff5a851c664bf54365ef0384499c4fcb5a4f06bb4b34dc84cd1d2f3b02a39f3c8a265a6b5c4a1b5691d6c7c790000000100", 0x13}, 0x48, r0) (async) r1 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='^(&,)#\\\x00', 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$unlink(0x9, 0x0, r2) r3 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) 19:39:38 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:38 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) 19:39:38 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:38 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000003c0), 0x3, 0x0, &(0x7f0000000680)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000080)=[{}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:38 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40080) 19:39:38 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) (async) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) 19:39:38 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:38 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:38 executing program 2: socket$inet(0x2, 0x2, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40080) 19:39:38 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "ddb209e1767b1e67e97c9aa34f22a90aafa8ddc4e317a100b93b274a7f72aa828952deac328919dc0258128c56619ab50568e32d7653612f514bf04b6aa38314", 0x1e}, 0x48, 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "2138b011c2fc78ab4a4ff5a851c664bf54365ef0384499c4fcb5a4f06bb4b34dc84cd1d2f3b02a39f3c8a265a6b5c4a1b5691d6c7c790000000100", 0x13}, 0x48, r0) (async, rerun: 64) r1 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='^(&,)#\\\x00', 0xfffffffffffffff9) (rerun: 64) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$unlink(0x9, 0x0, r2) (async) r3 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) 19:39:38 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:38 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000003c0), 0x3, 0x0, &(0x7f0000000680)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000080)=[{}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000003c0), 0x3, 0x0, &(0x7f0000000680)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000080)=[{}]}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:38 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xe40, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0xa29, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x20, 0x700, 0x227c, 0x8000007}}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:38 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:38 executing program 2: socket$inet(0x2, 0x2, 0x1) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40080) 19:39:38 executing program 3: r0 = socket(0x25, 0x4, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:38 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000003c0), 0x3, 0x0, &(0x7f0000000680)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000080)=[{}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:38 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 19:39:38 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xe40, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0xa29, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x20, 0x700, 0x227c, 0x8000007}}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xe40, 0x0) (async) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0xa29, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x20, 0x700, 0x227c, 0x8000007}}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:38 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x24a440, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x2}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) write$apparmor_exec(r1, &(0x7f0000000140)={'stack ', '/dev/ubi_ctrl\x00'}, 0x14) r2 = gettid() sched_getaffinity(r2, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x101, &(0x7f0000000000)=""/128) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x610400, 0x0) 19:39:38 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:38 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x91) 19:39:38 executing program 3: r0 = socket(0x25, 0x4, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket(0x25, 0x4, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) 19:39:38 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 19:39:38 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xe40, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0xa29, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x20, 0x700, 0x227c, 0x8000007}}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xe40, 0x0) (async) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0xa29, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x20, 0x700, 0x227c, 0x8000007}}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:38 executing program 3: r0 = socket(0x25, 0x4, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:38 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x91) 19:39:38 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r0 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r0, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:38 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x24a440, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x2}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) write$apparmor_exec(r1, &(0x7f0000000140)={'stack ', '/dev/ubi_ctrl\x00'}, 0x14) r2 = gettid() sched_getaffinity(r2, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x101, &(0x7f0000000000)=""/128) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x610400, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x24a440, 0x0) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x2}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) write$apparmor_exec(r1, &(0x7f0000000140)={'stack ', '/dev/ubi_ctrl\x00'}, 0x14) (async) gettid() (async) sched_getaffinity(r2, 0x8, &(0x7f0000000000)) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x101, &(0x7f0000000000)=""/128) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x610400, 0x0) (async) 19:39:38 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 19:39:38 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:38 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x91) 19:39:38 executing program 4: socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40080) 19:39:38 executing program 3: r0 = socket(0x1e, 0x2, 0x5) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:38 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r0 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r0, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:38 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x24a440, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x2}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) write$apparmor_exec(r1, &(0x7f0000000140)={'stack ', '/dev/ubi_ctrl\x00'}, 0x14) r2 = gettid() sched_getaffinity(r2, 0x8, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x101, &(0x7f0000000000)=""/128) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x610400, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x24a440, 0x0) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x2}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) write$apparmor_exec(r1, &(0x7f0000000140)={'stack ', '/dev/ubi_ctrl\x00'}, 0x14) (async) gettid() (async) sched_getaffinity(r2, 0x8, &(0x7f0000000000)) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x101, &(0x7f0000000000)=""/128) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x610400, 0x0) (async) 19:39:38 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:38 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000200)=""/139, 0x8b, 0x100, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x20) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x2, 0x2, 0x1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xdd}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x805) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pause() openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:38 executing program 3: r0 = socket(0x1e, 0x2, 0x5) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket(0x1e, 0x2, 0x5) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) 19:39:38 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:38 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = gettid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000100)={r0, 0x0, 0x80010000}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x48001) 19:39:38 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r0 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r0, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:38 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 19:39:38 executing program 3: r0 = socket(0x1e, 0x2, 0x5) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket(0x1e, 0x2, 0x5) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) 19:39:38 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = gettid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000100)={r0, 0x0, 0x80010000}) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x48001) 19:39:38 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) socket(0x27, 0x800, 0x7fff) 19:39:38 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:38 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x27, 0x2, 0x70) syz_open_dev$dri(&(0x7f0000000ec0), 0x6, 0xc0201) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x917, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4011) sendmsg$rds(r0, &(0x7f0000000e80)={&(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000900)=""/60, 0x3c}, {&(0x7f0000000940)=""/64, 0x40}], 0x2, &(0x7f0000000e00)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x6}, {&(0x7f00000009c0)=""/50, 0x32}, &(0x7f0000000d80)=[{&(0x7f0000000a00)=""/171, 0xab}, {&(0x7f0000000ac0)=""/216, 0xd8}, {&(0x7f0000000bc0)=""/52, 0x34}, {&(0x7f0000000c00)=""/55, 0x37}, {&(0x7f0000000c40)=""/21, 0x15}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x6, 0x5, 0x8000000000000000}}], 0x60, 0x91}, 0x4) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)=""/170, 0xaa}, {&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000000400)=""/219, 0xdb}], 0x5, &(0x7f0000000680)=[@mask_cswp={0x58, 0x114, 0x9, {{0xffff41a9, 0x10001}, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x100, 0x3, 0x5, 0xe456, 0xad, 0x2, 0x5}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0xeb72}, &(0x7f0000000600)=0x2, &(0x7f0000000640)=0x10000, 0x0, 0x4, 0x2b5c, 0x4, 0x30, 0x7}}], 0xb0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19:39:38 executing program 3: r0 = socket(0x2b, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) recvfrom$l2tp6(r0, &(0x7f0000000000)=""/49, 0x31, 0x40000040, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, 0x20) 19:39:39 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000200)=""/139, 0x8b, 0x100, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x20) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x2, 0x2, 0x1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xdd}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x805) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pause() openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) recvfrom$l2tp6(r0, &(0x7f0000000200)=""/139, 0x8b, 0x100, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x20) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket(0x2, 0x2, 0x1) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xdd}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x805) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) pause() (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:39 executing program 2: socket$inet(0x2, 0x2, 0x1) (async) r0 = gettid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000100)={r0, 0x0, 0x80010000}) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x48001) 19:39:39 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:39 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) socket(0x27, 0x800, 0x7fff) 19:39:39 executing program 3: r0 = socket(0x2b, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) recvfrom$l2tp6(r0, &(0x7f0000000000)=""/49, 0x31, 0x40000040, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, 0x20) socket(0x2b, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$l2tp6(r0, &(0x7f0000000000)=""/49, 0x31, 0x40000040, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, 0x20) (async) 19:39:39 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = socket(0x27, 0x2, 0x70) syz_open_dev$dri(&(0x7f0000000ec0), 0x6, 0xc0201) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x917, 0x4) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4011) (async, rerun: 64) sendmsg$rds(r0, &(0x7f0000000e80)={&(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000900)=""/60, 0x3c}, {&(0x7f0000000940)=""/64, 0x40}], 0x2, &(0x7f0000000e00)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x6}, {&(0x7f00000009c0)=""/50, 0x32}, &(0x7f0000000d80)=[{&(0x7f0000000a00)=""/171, 0xab}, {&(0x7f0000000ac0)=""/216, 0xd8}, {&(0x7f0000000bc0)=""/52, 0x34}, {&(0x7f0000000c00)=""/55, 0x37}, {&(0x7f0000000c40)=""/21, 0x15}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x6, 0x5, 0x8000000000000000}}], 0x60, 0x91}, 0x4) (async, rerun: 64) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)=""/170, 0xaa}, {&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000000400)=""/219, 0xdb}], 0x5, &(0x7f0000000680)=[@mask_cswp={0x58, 0x114, 0x9, {{0xffff41a9, 0x10001}, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x100, 0x3, 0x5, 0xe456, 0xad, 0x2, 0x5}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0xeb72}, &(0x7f0000000600)=0x2, &(0x7f0000000640)=0x10000, 0x0, 0x4, 0x2b5c, 0x4, 0x30, 0x7}}], 0xb0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19:39:39 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = geteuid() r1 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="b7c0782f9651295dd1562a822bfcbad8c0fa083f99d75d565ae3e70d978e5618032020d739285096f304b388dfd65a0ded4981b6a20ac829f72a0f8ff9d858d358d0253f19c1ba10a31712960bc2aa69b7cdcee1c6cc0d84597ece4ee31229681cc8eb8c3bc043a3c1d73840789e75dd80f51bdc2cdc9d3fa89757", 0x7b, 0xfffffffffffffffe) keyctl$chown(0x4, r1, r0, 0xee00) 19:39:39 executing program 3: r0 = socket(0x2b, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$l2tp6(r0, &(0x7f0000000000)=""/49, 0x31, 0x40000040, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, 0x20) 19:39:39 executing program 2: socket$inet(0x2, 0x2, 0x7) 19:39:39 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket(0x25, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x0) 19:39:39 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:39 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = socket(0x27, 0x2, 0x70) syz_open_dev$dri(&(0x7f0000000ec0), 0x6, 0xc0201) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x917, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4011) (async) sendmsg$rds(r0, &(0x7f0000000e80)={&(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000900)=""/60, 0x3c}, {&(0x7f0000000940)=""/64, 0x40}], 0x2, &(0x7f0000000e00)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x6}, {&(0x7f00000009c0)=""/50, 0x32}, &(0x7f0000000d80)=[{&(0x7f0000000a00)=""/171, 0xab}, {&(0x7f0000000ac0)=""/216, 0xd8}, {&(0x7f0000000bc0)=""/52, 0x34}, {&(0x7f0000000c00)=""/55, 0x37}, {&(0x7f0000000c40)=""/21, 0x15}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x6, 0x5, 0x8000000000000000}}], 0x60, 0x91}, 0x4) (async) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)=""/170, 0xaa}, {&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000000400)=""/219, 0xdb}], 0x5, &(0x7f0000000680)=[@mask_cswp={0x58, 0x114, 0x9, {{0xffff41a9, 0x10001}, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x100, 0x3, 0x5, 0xe456, 0xad, 0x2, 0x5}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0xeb72}, &(0x7f0000000600)=0x2, &(0x7f0000000640)=0x10000, 0x0, 0x4, 0x2b5c, 0x4, 0x30, 0x7}}], 0xb0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19:39:39 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000200)=""/139, 0x8b, 0x100, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x20) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket(0x2, 0x2, 0x1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xdd}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x805) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) pause() openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:39 executing program 3: r0 = socket(0x5, 0x9, 0x0) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x20) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd2a, 0x35dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x111) 19:39:39 executing program 2: socket$inet(0x2, 0x2, 0x7) 19:39:39 executing program 4: r0 = socket(0x22, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:39 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:39 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x4080, 0x0) write$apparmor_exec(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786500022f707468726561642d73656c662f617474722f657865630000000000"], 0x21) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, 0x3, 0x400, 0x8}, 0x18) write$apparmor_exec(r1, &(0x7f0000000200)={'exec ', '\x00'}, 0x6) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 19:39:39 executing program 2: socket$inet(0x2, 0x2, 0x7) 19:39:39 executing program 3: r0 = socket(0x5, 0x9, 0x0) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x20) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd2a, 0x35dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x111) 19:39:39 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x4080, 0x0) write$apparmor_exec(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786500022f707468726561642d73656c662f617474722f657865630000000000"], 0x21) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, 0x3, 0x400, 0x8}, 0x18) write$apparmor_exec(r1, &(0x7f0000000200)={'exec ', '\x00'}, 0x6) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x4080, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786500022f707468726561642d73656c662f617474722f657865630000000000"], 0x21) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, 0x3, 0x400, 0x8}, 0x18) (async) write$apparmor_exec(r1, &(0x7f0000000200)={'exec ', '\x00'}, 0x6) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) 19:39:39 executing program 4: r0 = socket(0x25, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf250600000008000a000100000014002000fc00000000000000000000000000000008001900ac1414aa050013007f00000008001700", @ANYRES32=r0, @ANYBLOB="05001400c0dbcb0000"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000002c0)) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1f5b0000", @ANYRESHEX=r4, @ANYBLOB="080026bd7000fddbdf250000000014002000fe800000000000000000000000000027"], 0x28}, 0x1, 0x0, 0x0, 0x48}, 0x800) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:39:39 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:39 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (fail_nth: 1) [ 1321.009130] FAULT_INJECTION: forcing a failure. [ 1321.009130] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.030748] CPU: 0 PID: 16041 Comm: syz-executor.4 Not tainted 4.14.289-syzkaller #0 [ 1321.038645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1321.047993] Call Trace: [ 1321.050575] dump_stack+0x1b2/0x281 [ 1321.054186] should_fail.cold+0x10a/0x149 [ 1321.058348] should_failslab+0xd6/0x130 [ 1321.062501] __kmalloc_track_caller+0x2bc/0x400 [ 1321.067152] ? proc_pid_attr_write+0x16c/0x320 [ 1321.071729] memdup_user+0x22/0xa0 [ 1321.075256] proc_pid_attr_write+0x16c/0x320 [ 1321.079657] __vfs_write+0xe4/0x630 [ 1321.083273] ? proc_pid_wchan+0xf0/0xf0 [ 1321.087231] ? __handle_mm_fault+0x80f/0x4620 [ 1321.091708] ? kernel_read+0x110/0x110 [ 1321.095621] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1321.101060] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1321.106062] vfs_write+0x17f/0x4d0 [ 1321.109591] SyS_write+0xf2/0x210 [ 1321.113025] ? SyS_read+0x210/0x210 [ 1321.116633] ? __do_page_fault+0x159/0xad0 [ 1321.120855] ? do_syscall_64+0x4c/0x640 [ 1321.124813] ? SyS_read+0x210/0x210 [ 1321.128522] do_syscall_64+0x1d5/0x640 [ 1321.132397] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1321.137565] RIP: 0033:0x7f74cac4e209 [ 1321.141406] RSP: 002b:00007f74c95c3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1321.149104] RAX: ffffffffffffffda RBX: 00007f74cad60f60 RCX: 00007f74cac4e209 [ 1321.156357] RDX: 0000000000000022 RSI: 0000000020000180 RDI: 0000000000000003 [ 1321.163607] RBP: 00007f74c95c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1321.170855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1321.178106] R13: 00007ffe654036af R14: 00007f74c95c3300 R15: 0000000000022000 19:39:40 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:40 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x21, @private=0xa010102, 0x4e24, 0x1, 'nq\x00', 0x24, 0x28000}, 0x2c) 19:39:40 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x4080, 0x0) write$apparmor_exec(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786500022f707468726561642d73656c662f617474722f657865630000000000"], 0x21) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, 0x3, 0x400, 0x8}, 0x18) (async) write$apparmor_exec(r1, &(0x7f0000000200)={'exec ', '\x00'}, 0x6) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 19:39:40 executing program 3: r0 = socket(0x5, 0x9, 0x0) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x20) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd2a, 0x35dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x111) socket(0x5, 0x9, 0x0) (async) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x20) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd2a, 0x35dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x111) (async) 19:39:40 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:40 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (fail_nth: 2) 19:39:40 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:40 executing program 2: socket$inet(0x2, 0x2, 0x1) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x21, @private=0xa010102, 0x4e24, 0x1, 'nq\x00', 0x24, 0x28000}, 0x2c) 19:39:40 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xd) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f00000000c0)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000240)={0xf, 0x8, {0x54, 0x6, 0x0, {0x4, 0x1}, {0x7, 0x3}, @rumble={0x0, 0x4}}, {0x53, 0x9, 0x4e0, {0x3ff, 0x43f}, {0x800, 0x7}, @ramp={0x4, 0x81, {0x6, 0xeb2, 0x2, 0xfffa}}}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x100, @local, 0x101, 0x7}, 0x20) 19:39:40 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) [ 1321.720772] FAULT_INJECTION: forcing a failure. [ 1321.720772] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.764130] CPU: 0 PID: 16055 Comm: syz-executor.4 Not tainted 4.14.289-syzkaller #0 [ 1321.772033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1321.781384] Call Trace: [ 1321.783973] dump_stack+0x1b2/0x281 [ 1321.787611] should_fail.cold+0x10a/0x149 [ 1321.791772] should_failslab+0xd6/0x130 [ 1321.795747] kmem_cache_alloc+0x40/0x3c0 [ 1321.799814] audit_log_start.part.0+0x20e/0x650 [ 1321.804488] ? kauditd_thread+0x630/0x630 [ 1321.808636] ? audit_filter+0x2a6/0x960 19:39:40 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x131100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20001801}, 0x4004041) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0xc) [ 1321.812613] ? audit_compare_dname_path+0x90/0x90 [ 1321.817453] ? aa_lookupn_profile+0x120/0x950 [ 1321.821953] ? __aafs_ns_mkdir+0x9d0/0x9d0 [ 1321.826216] audit_log_start+0x45/0x70 [ 1321.830104] ? audit_file_mask+0x110/0x110 [ 1321.834330] common_lsm_audit+0xb2/0x1a70 [ 1321.838482] ? ipv6_skb_to_auditdata+0xcb0/0xcb0 [ 1321.843235] ? aa_lookupn_profile+0x151/0x950 [ 1321.847734] aa_audit+0x1cb/0x620 [ 1321.851182] ? audit_file_mask+0x110/0x110 [ 1321.855414] aa_audit_file+0x2c0/0x540 [ 1321.859307] ? file_audit_cb+0x670/0x670 [ 1321.863369] ? aa_label_parse+0x512/0xa20 [ 1321.867523] ? lock_acquire+0x170/0x3f0 [ 1321.871502] aa_change_profile+0xcd3/0x2440 [ 1321.875836] ? kernel_poison_pages+0x1b/0x250 [ 1321.880326] ? aa_change_hat+0xf60/0xf60 [ 1321.884382] ? depot_save_stack+0x10d/0x3f0 [ 1321.888798] ? __lock_acquire+0x5fc/0x3f20 [ 1321.893032] ? do_syscall_64+0x1d5/0x640 [ 1321.897089] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1321.902449] ? __lock_acquire+0x5fc/0x3f20 [ 1321.906786] apparmor_setprocattr+0x98c/0xa80 19:39:40 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) [ 1321.911286] ? apparmor_cred_free+0x70/0x70 [ 1321.915604] ? aa_file_perm+0x2dd/0xab0 [ 1321.919579] ? proc_pid_attr_write+0x1c0/0x320 [ 1321.924256] ? __might_fault+0x177/0x1b0 [ 1321.928403] security_setprocattr+0x74/0xb0 [ 1321.932739] proc_pid_attr_write+0x22b/0x320 [ 1321.937145] __vfs_write+0xe4/0x630 [ 1321.940776] ? proc_pid_wchan+0xf0/0xf0 [ 1321.944739] ? __handle_mm_fault+0x80f/0x4620 [ 1321.944757] ? kernel_read+0x110/0x110 [ 1321.944775] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1321.944786] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1321.944797] vfs_write+0x17f/0x4d0 [ 1321.944808] SyS_write+0xf2/0x210 [ 1321.970740] ? SyS_read+0x210/0x210 [ 1321.974376] ? __do_page_fault+0x159/0xad0 [ 1321.978610] ? do_syscall_64+0x4c/0x640 [ 1321.982579] ? SyS_read+0x210/0x210 [ 1321.986212] do_syscall_64+0x1d5/0x640 [ 1321.990154] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1321.995359] RIP: 0033:0x7f74cac4e209 [ 1321.999078] RSP: 002b:00007f74c95c3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1322.006791] RAX: ffffffffffffffda RBX: 00007f74cad60f60 RCX: 00007f74cac4e209 19:39:41 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000040)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:41 executing program 3: r0 = socket(0x25, 0x5, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x131100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20001801}, 0x4004041) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0xc) 19:39:41 executing program 2: socket$inet(0x2, 0x2, 0x1) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x21, @private=0xa010102, 0x4e24, 0x1, 'nq\x00', 0x24, 0x28000}, 0x2c) 19:39:41 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xd) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f00000000c0)) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000240)={0xf, 0x8, {0x54, 0x6, 0x0, {0x4, 0x1}, {0x7, 0x3}, @rumble={0x0, 0x4}}, {0x53, 0x9, 0x4e0, {0x3ff, 0x43f}, {0x800, 0x7}, @ramp={0x4, 0x81, {0x6, 0xeb2, 0x2, 0xfffa}}}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x100, @local, 0x101, 0x7}, 0x20) 19:39:41 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) [ 1322.014065] RDX: 0000000000000022 RSI: 0000000020000180 RDI: 0000000000000003 [ 1322.021420] RBP: 00007f74c95c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1322.028773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.036214] R13: 00007ffe654036af R14: 00007f74c95c3300 R15: 0000000000022000 19:39:41 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (fail_nth: 3) 19:39:41 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000040)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:41 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xd) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f00000000c0)) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000240)={0xf, 0x8, {0x54, 0x6, 0x0, {0x4, 0x1}, {0x7, 0x3}, @rumble={0x0, 0x4}}, {0x53, 0x9, 0x4e0, {0x3ff, 0x43f}, {0x800, 0x7}, @ramp={0x4, 0x81, {0x6, 0xeb2, 0x2, 0xfffa}}}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x100, @local, 0x101, 0x7}, 0x20) 19:39:41 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:41 executing program 3: r0 = socket(0x25, 0x5, 0x0) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x131100, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20001801}, 0x4004041) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0xc) 19:39:41 executing program 2: socket$inet(0x2, 0x3, 0xf52b) 19:39:41 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r0 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r0, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:41 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000040)) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:41 executing program 2: socket$inet(0x2, 0x3, 0xf52b) [ 1322.212255] FAULT_INJECTION: forcing a failure. [ 1322.212255] name failslab, interval 1, probability 0, space 0, times 0 19:39:41 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '+\x00'}, 0x7) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x6) [ 1322.296517] CPU: 1 PID: 16119 Comm: syz-executor.4 Not tainted 4.14.289-syzkaller #0 [ 1322.304424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1322.313776] Call Trace: [ 1322.316366] dump_stack+0x1b2/0x281 [ 1322.320000] should_fail.cold+0x10a/0x149 [ 1322.324151] should_failslab+0xd6/0x130 [ 1322.328130] kmem_cache_alloc_node+0x54/0x410 [ 1322.332637] __alloc_skb+0x5c/0x510 [ 1322.336270] audit_log_start.part.0+0x233/0x650 [ 1322.340949] ? kauditd_thread+0x630/0x630 [ 1322.345096] ? audit_filter+0x2a6/0x960 [ 1322.349083] ? audit_compare_dname_path+0x90/0x90 [ 1322.353927] ? aa_lookupn_profile+0x120/0x950 [ 1322.358421] ? __aafs_ns_mkdir+0x9d0/0x9d0 [ 1322.362747] audit_log_start+0x45/0x70 [ 1322.366643] ? audit_file_mask+0x110/0x110 [ 1322.370873] common_lsm_audit+0xb2/0x1a70 [ 1322.375023] ? ipv6_skb_to_auditdata+0xcb0/0xcb0 [ 1322.379780] ? aa_lookupn_profile+0x151/0x950 [ 1322.384281] aa_audit+0x1cb/0x620 [ 1322.387731] ? audit_file_mask+0x110/0x110 [ 1322.391975] aa_audit_file+0x2c0/0x540 19:39:41 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '+\x00'}, 0x7) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x6) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '+\x00'}, 0x7) (async) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x6) (async) 19:39:41 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '+\x00'}, 0x7) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x6) [ 1322.395864] ? file_audit_cb+0x670/0x670 [ 1322.399927] ? aa_label_parse+0x512/0xa20 [ 1322.404095] ? lock_acquire+0x170/0x3f0 [ 1322.408066] aa_change_profile+0xcd3/0x2440 [ 1322.412396] ? kernel_poison_pages+0x1b/0x250 [ 1322.416904] ? aa_change_hat+0xf60/0xf60 [ 1322.420961] ? depot_save_stack+0x10d/0x3f0 [ 1322.425287] ? __lock_acquire+0x5fc/0x3f20 [ 1322.429526] ? do_syscall_64+0x1d5/0x640 [ 1322.433592] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1322.439061] ? __lock_acquire+0x5fc/0x3f20 [ 1322.443304] apparmor_setprocattr+0x98c/0xa80 [ 1322.447801] ? apparmor_cred_free+0x70/0x70 [ 1322.452120] ? aa_file_perm+0x2dd/0xab0 [ 1322.456097] ? proc_pid_attr_write+0x1c0/0x320 [ 1322.460685] ? __might_fault+0x177/0x1b0 [ 1322.464849] security_setprocattr+0x74/0xb0 [ 1322.469174] proc_pid_attr_write+0x22b/0x320 [ 1322.473865] __vfs_write+0xe4/0x630 [ 1322.477498] ? proc_pid_wchan+0xf0/0xf0 [ 1322.481483] ? __handle_mm_fault+0x80f/0x4620 [ 1322.485978] ? kernel_read+0x110/0x110 [ 1322.489892] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1322.495535] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1322.500556] vfs_write+0x17f/0x4d0 [ 1322.504185] SyS_write+0xf2/0x210 [ 1322.507638] ? SyS_read+0x210/0x210 [ 1322.511264] ? __do_page_fault+0x159/0xad0 [ 1322.515596] ? do_syscall_64+0x4c/0x640 [ 1322.519574] ? SyS_read+0x210/0x210 [ 1322.523204] do_syscall_64+0x1d5/0x640 [ 1322.527096] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1322.532275] RIP: 0033:0x7f74cac4e209 [ 1322.536587] RSP: 002b:00007f74c95c3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1322.544304] RAX: ffffffffffffffda RBX: 00007f74cad60f60 RCX: 00007f74cac4e209 [ 1322.551568] RDX: 0000000000000022 RSI: 0000000020000180 RDI: 0000000000000003 [ 1322.558828] RBP: 00007f74c95c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1322.566078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.573329] R13: 00007ffe654036af R14: 00007f74c95c3300 R15: 0000000000022000 [ 1322.588282] audit_log_lost: 26 callbacks suppressed 19:39:41 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (fail_nth: 4) 19:39:41 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r0 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r0, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:41 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:41 executing program 2: socket$inet(0x2, 0x3, 0xf52b) 19:39:41 executing program 3: r0 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44814}, 0x20004040) 19:39:41 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xe5) [ 1322.588289] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1322.600810] audit: out of memory in audit_log_start [ 1322.689588] FAULT_INJECTION: forcing a failure. [ 1322.689588] name failslab, interval 1, probability 0, space 0, times 0 19:39:41 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) (rerun: 64) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xe5) 19:39:41 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r0 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r0, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:41 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:41 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) uname(&(0x7f0000000ac0)=""/249) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20004010) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x104, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x3f}, @ptr={0x70742a85, 0x1, &(0x7f0000000bc0)=""/4084, 0xff4, 0x1, 0xc}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x1, 0x8}, @flat=@binder={0x73622a85, 0x8, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x2}, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000380), 0x0, 0x2, 0xe}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000000540)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x2}, @dead_binder_done], 0xbd, 0x0, &(0x7f0000000900)="bc3223d82f6ed4eb89866faa2d172dd5a476ca4cc0e964bf54fb4919b4d403b61ce67d323e4be9ec94cf2490ed477ce619074c1ef098ee9792deaf92825d5ff7d32d07b15ffdb3a9e6c6461036e378c9f57eb5e573d5baa428a7cd168b84c98140346c1e48741cd15d2c1bd86d48c283ddafb360624d8922125ff6b4df40ac3b9e34f5795ae697db99f1b4f9ce91fc6fbc0407d2291a5c4200e333f2263b377d3d3c1fdbfafcf263c2ebb688e2c6e938168725c3430a4a36e847256a00"}) 19:39:41 executing program 3: r0 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44814}, 0x20004040) [ 1322.788390] CPU: 1 PID: 16175 Comm: syz-executor.4 Not tainted 4.14.289-syzkaller #0 [ 1322.796290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1322.805824] Call Trace: [ 1322.808417] dump_stack+0x1b2/0x281 [ 1322.812062] should_fail.cold+0x10a/0x149 [ 1322.816224] should_failslab+0xd6/0x130 [ 1322.820377] kmem_cache_alloc_node_trace+0x58/0x400 [ 1322.825398] __kmalloc_node_track_caller+0x38/0x70 [ 1322.830326] __alloc_skb+0x96/0x510 [ 1322.833975] audit_log_start.part.0+0x233/0x650 [ 1322.838677] ? kauditd_thread+0x630/0x630 [ 1322.842839] ? audit_filter+0x2a6/0x960 [ 1322.846835] ? audit_compare_dname_path+0x90/0x90 [ 1322.851764] ? aa_lookupn_profile+0x120/0x950 [ 1322.856355] ? __aafs_ns_mkdir+0x9d0/0x9d0 [ 1322.860593] audit_log_start+0x45/0x70 [ 1322.864482] ? audit_file_mask+0x110/0x110 [ 1322.868719] common_lsm_audit+0xb2/0x1a70 [ 1322.872865] ? ipv6_skb_to_auditdata+0xcb0/0xcb0 [ 1322.877719] ? aa_lookupn_profile+0x151/0x950 [ 1322.882228] aa_audit+0x1cb/0x620 [ 1322.885680] ? audit_file_mask+0x110/0x110 [ 1322.889923] aa_audit_file+0x2c0/0x540 [ 1322.893907] ? file_audit_cb+0x670/0x670 [ 1322.897969] ? aa_label_parse+0x512/0xa20 [ 1322.902124] ? lock_acquire+0x170/0x3f0 [ 1322.906109] aa_change_profile+0xcd3/0x2440 [ 1322.906131] ? kernel_poison_pages+0x1b/0x250 [ 1322.915063] ? aa_change_hat+0xf60/0xf60 [ 1322.919119] ? depot_save_stack+0x10d/0x3f0 [ 1322.923444] ? __lock_acquire+0x5fc/0x3f20 [ 1322.927675] ? do_syscall_64+0x1d5/0x640 [ 1322.931730] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1322.937092] ? __lock_acquire+0x5fc/0x3f20 [ 1322.941309] apparmor_setprocattr+0x98c/0xa80 [ 1322.945794] ? apparmor_cred_free+0x70/0x70 [ 1322.950097] ? aa_file_perm+0x2dd/0xab0 [ 1322.954062] ? proc_pid_attr_write+0x1c0/0x320 [ 1322.958636] ? __might_fault+0x177/0x1b0 [ 1322.962676] security_setprocattr+0x74/0xb0 [ 1322.966976] proc_pid_attr_write+0x22b/0x320 [ 1322.971363] __vfs_write+0xe4/0x630 [ 1322.974973] ? proc_pid_wchan+0xf0/0xf0 [ 1322.978923] ? __handle_mm_fault+0x80f/0x4620 [ 1322.983413] ? kernel_read+0x110/0x110 [ 1322.987295] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1322.992890] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1322.997908] vfs_write+0x17f/0x4d0 [ 1323.001451] SyS_write+0xf2/0x210 [ 1323.005155] ? SyS_read+0x210/0x210 [ 1323.008774] ? __do_page_fault+0x159/0xad0 [ 1323.013354] ? do_syscall_64+0x4c/0x640 [ 1323.017306] ? SyS_read+0x210/0x210 [ 1323.020911] do_syscall_64+0x1d5/0x640 [ 1323.024784] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1323.029969] RIP: 0033:0x7f74cac4e209 [ 1323.033794] RSP: 002b:00007f74c95c3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1323.041483] RAX: ffffffffffffffda RBX: 00007f74cad60f60 RCX: 00007f74cac4e209 [ 1323.048731] RDX: 0000000000000022 RSI: 0000000020000180 RDI: 0000000000000003 [ 1323.055979] RBP: 00007f74c95c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.063237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.070495] R13: 00007ffe654036af R14: 00007f74c95c3300 R15: 0000000000022000 19:39:42 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xe5) 19:39:42 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (fail_nth: 5) 19:39:42 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:42 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:42 executing program 3: r0 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44814}, 0x20004040) 19:39:42 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000000)=0x14, 0x800) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x1d) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) [ 1323.088142] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 1323.101505] audit: out of memory in audit_log_start 19:39:42 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) uname(&(0x7f0000000ac0)=""/249) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20004010) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x104, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x3f}, @ptr={0x70742a85, 0x1, &(0x7f0000000bc0)=""/4084, 0xff4, 0x1, 0xc}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x1, 0x8}, @flat=@binder={0x73622a85, 0x8, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x2}, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000380), 0x0, 0x2, 0xe}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000000540)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x2}, @dead_binder_done], 0xbd, 0x0, &(0x7f0000000900)="bc3223d82f6ed4eb89866faa2d172dd5a476ca4cc0e964bf54fb4919b4d403b61ce67d323e4be9ec94cf2490ed477ce619074c1ef098ee9792deaf92825d5ff7d32d07b15ffdb3a9e6c6461036e378c9f57eb5e573d5baa428a7cd168b84c98140346c1e48741cd15d2c1bd86d48c283ddafb360624d8922125ff6b4df40ac3b9e34f5795ae697db99f1b4f9ce91fc6fbc0407d2291a5c4200e333f2263b377d3d3c1fdbfafcf263c2ebb688e2c6e938168725c3430a4a36e847256a00"}) socket$inet(0x2, 0x2, 0x1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) uname(&(0x7f0000000ac0)=""/249) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20004010) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x104, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x3f}, @ptr={0x70742a85, 0x1, &(0x7f0000000bc0)=""/4084, 0xff4, 0x1, 0xc}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x1, 0x8}, @flat=@binder={0x73622a85, 0x8, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x2}, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000380), 0x0, 0x2, 0xe}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000000540)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x2}, @dead_binder_done], 0xbd, 0x0, &(0x7f0000000900)="bc3223d82f6ed4eb89866faa2d172dd5a476ca4cc0e964bf54fb4919b4d403b61ce67d323e4be9ec94cf2490ed477ce619074c1ef098ee9792deaf92825d5ff7d32d07b15ffdb3a9e6c6461036e378c9f57eb5e573d5baa428a7cd168b84c98140346c1e48741cd15d2c1bd86d48c283ddafb360624d8922125ff6b4df40ac3b9e34f5795ae697db99f1b4f9ce91fc6fbc0407d2291a5c4200e333f2263b377d3d3c1fdbfafcf263c2ebb688e2c6e938168725c3430a4a36e847256a00"}) (async) 19:39:42 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:42 executing program 4: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:42 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x2, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x3000c040}, 0x4) r1 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) 19:39:42 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000000)=0x14, 0x800) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x1d) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) [ 1323.201023] audit: type=1400 audit(1658864382.185:83): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=16208 comm="syz-executor.4" 19:39:42 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="1098ac3202571ff6e8b4a0f1c640df264c16a5c58f9114bf862e7f5b09c0943364ac85f9f8e92f78466488535717a547e4b85fdc5d2d7ba54c1ec92c8012169204e6f954d4b1e19d19305c5171e6a1d85635048fa62826195115a8d42d38ff9cf62f6844fc3f679fb477a7a6e1f3228026232eaab07f65c1621717322c2e81e74d06c8c2b564d7ef1881671a98ea87d3e7142fa0627013c752349a50c76260d39354fc1cf6c01d03921dab09e699b38c9776da584ca4782ebf8c19", 0xbb, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x4, 0xde200) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000180)={r1}) 19:39:42 executing program 4: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:42 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) uname(&(0x7f0000000ac0)=""/249) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20004010) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x104, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x3f}, @ptr={0x70742a85, 0x1, &(0x7f0000000bc0)=""/4084, 0xff4, 0x1, 0xc}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x1, 0x8}, @flat=@binder={0x73622a85, 0x8, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x2}, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000380), 0x0, 0x2, 0xe}, @fda={0x66646185, 0x3, 0x0, 0x35}}, &(0x7f0000000540)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x2}, @dead_binder_done], 0xbd, 0x0, &(0x7f0000000900)="bc3223d82f6ed4eb89866faa2d172dd5a476ca4cc0e964bf54fb4919b4d403b61ce67d323e4be9ec94cf2490ed477ce619074c1ef098ee9792deaf92825d5ff7d32d07b15ffdb3a9e6c6461036e378c9f57eb5e573d5baa428a7cd168b84c98140346c1e48741cd15d2c1bd86d48c283ddafb360624d8922125ff6b4df40ac3b9e34f5795ae697db99f1b4f9ce91fc6fbc0407d2291a5c4200e333f2263b377d3d3c1fdbfafcf263c2ebb688e2c6e938168725c3430a4a36e847256a00"}) 19:39:42 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000000)=0x14, 0x800) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x1d) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 64) 19:39:42 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:42 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="1098ac3202571ff6e8b4a0f1c640df264c16a5c58f9114bf862e7f5b09c0943364ac85f9f8e92f78466488535717a547e4b85fdc5d2d7ba54c1ec92c8012169204e6f954d4b1e19d19305c5171e6a1d85635048fa62826195115a8d42d38ff9cf62f6844fc3f679fb477a7a6e1f3228026232eaab07f65c1621717322c2e81e74d06c8c2b564d7ef1881671a98ea87d3e7142fa0627013c752349a50c76260d39354fc1cf6c01d03921dab09e699b38c9776da584ca4782ebf8c19", 0xbb, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x4, 0xde200) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000180)={r1}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="1098ac3202571ff6e8b4a0f1c640df264c16a5c58f9114bf862e7f5b09c0943364ac85f9f8e92f78466488535717a547e4b85fdc5d2d7ba54c1ec92c8012169204e6f954d4b1e19d19305c5171e6a1d85635048fa62826195115a8d42d38ff9cf62f6844fc3f679fb477a7a6e1f3228026232eaab07f65c1621717322c2e81e74d06c8c2b564d7ef1881671a98ea87d3e7142fa0627013c752349a50c76260d39354fc1cf6c01d03921dab09e699b38c9776da584ca4782ebf8c19", 0xbb}) (async) syz_open_dev$dri(&(0x7f0000000200), 0x4, 0xde200) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000240)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000180)={r1}) (async) 19:39:42 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x2, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x3000c040}, 0x4) r1 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) 19:39:42 executing program 4: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) 19:39:42 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:42 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00002bbda87000fc00050033000220211ba05317161f34010008002c00cf160b9d40dc868a0589a122edd55a7c09625ea5f8d21daf5351e6c1df067bcfd5e08bb4d2c9117a35fe0ec7bbb67187f3515aa9d3b25c2447623d71b84011a43424f60405"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20004811) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x1030c1, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x804) 19:39:42 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="1098ac3202571ff6e8b4a0f1c640df264c16a5c58f9114bf862e7f5b09c0943364ac85f9f8e92f78466488535717a547e4b85fdc5d2d7ba54c1ec92c8012169204e6f954d4b1e19d19305c5171e6a1d85635048fa62826195115a8d42d38ff9cf62f6844fc3f679fb477a7a6e1f3228026232eaab07f65c1621717322c2e81e74d06c8c2b564d7ef1881671a98ea87d3e7142fa0627013c752349a50c76260d39354fc1cf6c01d03921dab09e699b38c9776da584ca4782ebf8c19", 0xbb, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x4, 0xde200) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000180)={r1}) 19:39:42 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x88}, 0x1, 0x0, 0x0, 0x40015}, 0x20000001) 19:39:42 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x2, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x3000c040}, 0x4) r1 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x2, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x3000c040}, 0x4) (async) socket(0x25, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) 19:39:42 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:42 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '/pr\x00\xf9\xff\xffo\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00tt\x8b>exe\xe3\xe2\x81[9&h\xc6#c\x00'}, 0x3b) [ 1323.500778] audit: type=1400 audit(1658864382.485:84): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=16277 comm="syz-executor.1" 19:39:42 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x88}, 0x1, 0x0, 0x0, 0x40015}, 0x20000001) 19:39:42 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00002bbda87000fc00050033000220211ba05317161f34010008002c00cf160b9d40dc868a0589a122edd55a7c09625ea5f8d21daf5351e6c1df067bcfd5e08bb4d2c9117a35fe0ec7bbb67187f3515aa9d3b25c2447623d71b84011a43424f60405"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20004811) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x1030c1, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x804) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00002bbda87000fc00050033000220211ba05317161f34010008002c00cf160b9d40dc868a0589a122edd55a7c09625ea5f8d21daf5351e6c1df067bcfd5e08bb4d2c9117a35fe0ec7bbb67187f3515aa9d3b25c2447623d71b84011a43424f60405"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8094) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20004811) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x1030c1, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x804) (async) 19:39:42 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 19:39:42 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:42 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '/pr\x00\xf9\xff\xffo\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00tt\x8b>exe\xe3\xe2\x81[9&h\xc6#c\x00'}, 0x3b) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '/pr\x00\xf9\xff\xffo\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00tt\x8b>exe\xe3\xe2\x81[9&h\xc6#c\x00'}, 0x3b) (async) [ 1323.582130] audit: type=1400 audit(1658864382.565:85): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=16286 comm="syz-executor.1" 19:39:42 executing program 3: r0 = socket(0x25, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x180) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80000001}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x20040050) 19:39:42 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x88}, 0x1, 0x0, 0x0, 0x40015}, 0x20000001) (rerun: 32) 19:39:42 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:42 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00002bbda87000fc00050033000220211ba05317161f34010008002c00cf160b9d40dc868a0589a122edd55a7c09625ea5f8d21daf5351e6c1df067bcfd5e08bb4d2c9117a35fe0ec7bbb67187f3515aa9d3b25c2447623d71b84011a43424f60405"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8094) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20004811) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x1030c1, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x804) 19:39:42 executing program 3: r0 = socket(0x25, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x180) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80000001}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x20040050) 19:39:42 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '/pr\x00\xf9\xff\xffo\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00tt\x8b>exe\xe3\xe2\x81[9&h\xc6#c\x00'}, 0x3b) [ 1323.681422] audit: type=1400 audit(1658864382.665:86): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=16308 comm="syz-executor.1" 19:39:42 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 19:39:42 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x2b, 0x4) 19:39:42 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:42 executing program 3: r0 = socket(0x25, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x180) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80000001}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x20040050) socket(0x25, 0x5, 0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x180) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80000001}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x20040050) (async) 19:39:42 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/threadself/attr/exec\x00\x00'}, 0x22) 19:39:42 executing program 2: socket$inet(0x2, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) 19:39:42 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) [ 1323.807980] audit: type=1400 audit(1658864382.795:87): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=16333 comm="syz-executor.1" 19:39:42 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:42 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x2b, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x2b, 0x4) (async) [ 1323.884651] audit: type=1400 audit(1658864382.865:88): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=16356 comm="syz-executor.1" 19:39:42 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/threadself/attr/exec\x00\x00'}, 0x22) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/threadself/attr/exec\x00\x00'}, 0x22) (async) 19:39:42 executing program 2: socket$inet(0x2, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x3, 0x1) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) 19:39:42 executing program 3: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x400) r0 = socket(0x25, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4b}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x800) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:43 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x2b, 0x4) 19:39:43 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x0, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:43 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x9, 0x0, [{0x3f, 0x7fffffff, 0x8, [0x2, 0x1, 0x9, 0x2, 0x6, 0x1ff, 0x40, 0xffff]}, {0x6, 0x401, 0x7f, [0x8, 0x40, 0x101, 0x401, 0x8c, 0x83, 0x1, 0x3]}, {0x667c, 0x44, 0x8, [0x3f9b, 0x6, 0x4, 0x54c, 0xff, 0x3, 0x0, 0x80000001]}, {0xb52a, 0x1, 0x50c3, [0x40, 0x7, 0x800, 0xffff, 0x7f, 0x6, 0x9]}, {0x3e47, 0xffff800f, 0xffffffff, [0x7, 0x1, 0x0, 0x5169, 0x1000, 0x1, 0x4]}, {0x81, 0x382a, 0x923, [0x5, 0x1, 0x2, 0x2, 0xfffffff8, 0xfff, 0x20, 0x4]}, {0x0, 0x55, 0x7f, [0xcdbc, 0x3, 0x9, 0x100, 0x7f, 0x4, 0x2]}, {0x3, 0x2, 0x4, [0x8a0, 0x80000000, 0x7, 0x40, 0x8000, 0x8000, 0x9, 0x6]}, {0x6, 0x8a1a, 0x10000, [0x2, 0x1f01, 0x5, 0x0, 0x80000000, 0x7, 0x9, 0x4]}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:43 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/threadself/attr/exec\x00\x00'}, 0x22) 19:39:43 executing program 2: socket$inet(0x2, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x3, 0x1) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) 19:39:43 executing program 3: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x400) r0 = socket(0x25, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4b}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x800) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:43 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:43 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) brk(0x800) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000040)=""/217, 0xd9, 0x51, 0x0, 0x0) 19:39:43 executing program 3: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x400) r0 = socket(0x25, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4b}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x800) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x400) (async) socket(0x25, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4b}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x800) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) 19:39:43 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x0, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:43 executing program 2: socket$inet(0x2, 0x2, 0x2) 19:39:43 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x9, 0x0, [{0x3f, 0x7fffffff, 0x8, [0x2, 0x1, 0x9, 0x2, 0x6, 0x1ff, 0x40, 0xffff]}, {0x6, 0x401, 0x7f, [0x8, 0x40, 0x101, 0x401, 0x8c, 0x83, 0x1, 0x3]}, {0x667c, 0x44, 0x8, [0x3f9b, 0x6, 0x4, 0x54c, 0xff, 0x3, 0x0, 0x80000001]}, {0xb52a, 0x1, 0x50c3, [0x40, 0x7, 0x800, 0xffff, 0x7f, 0x6, 0x9]}, {0x3e47, 0xffff800f, 0xffffffff, [0x7, 0x1, 0x0, 0x5169, 0x1000, 0x1, 0x4]}, {0x81, 0x382a, 0x923, [0x5, 0x1, 0x2, 0x2, 0xfffffff8, 0xfff, 0x20, 0x4]}, {0x0, 0x55, 0x7f, [0xcdbc, 0x3, 0x9, 0x100, 0x7f, 0x4, 0x2]}, {0x3, 0x2, 0x4, [0x8a0, 0x80000000, 0x7, 0x40, 0x8000, 0x8000, 0x9, 0x6]}, {0x6, 0x8a1a, 0x10000, [0x2, 0x1f01, 0x5, 0x0, 0x80000000, 0x7, 0x9, 0x4]}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x9, 0x0, [{0x3f, 0x7fffffff, 0x8, [0x2, 0x1, 0x9, 0x2, 0x6, 0x1ff, 0x40, 0xffff]}, {0x6, 0x401, 0x7f, [0x8, 0x40, 0x101, 0x401, 0x8c, 0x83, 0x1, 0x3]}, {0x667c, 0x44, 0x8, [0x3f9b, 0x6, 0x4, 0x54c, 0xff, 0x3, 0x0, 0x80000001]}, {0xb52a, 0x1, 0x50c3, [0x40, 0x7, 0x800, 0xffff, 0x7f, 0x6, 0x9]}, {0x3e47, 0xffff800f, 0xffffffff, [0x7, 0x1, 0x0, 0x5169, 0x1000, 0x1, 0x4]}, {0x81, 0x382a, 0x923, [0x5, 0x1, 0x2, 0x2, 0xfffffff8, 0xfff, 0x20, 0x4]}, {0x0, 0x55, 0x7f, [0xcdbc, 0x3, 0x9, 0x100, 0x7f, 0x4, 0x2]}, {0x3, 0x2, 0x4, [0x8a0, 0x80000000, 0x7, 0x40, 0x8000, 0x8000, 0x9, 0x6]}, {0x6, 0x8a1a, 0x10000, [0x2, 0x1f01, 0x5, 0x0, 0x80000000, 0x7, 0x9, 0x4]}]}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:43 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 19:39:43 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) brk(0x800) (async) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000040)=""/217, 0xd9, 0x51, 0x0, 0x0) 19:39:43 executing program 2: socket$inet(0x2, 0x2, 0x2) 19:39:43 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 19:39:43 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) brk(0x800) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000040)=""/217, 0xd9, 0x51, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) brk(0x800) (async) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000040)=""/217, 0xd9, 0x51, 0x0, 0x0) (async) 19:39:43 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x9, 0x0, [{0x3f, 0x7fffffff, 0x8, [0x2, 0x1, 0x9, 0x2, 0x6, 0x1ff, 0x40, 0xffff]}, {0x6, 0x401, 0x7f, [0x8, 0x40, 0x101, 0x401, 0x8c, 0x83, 0x1, 0x3]}, {0x667c, 0x44, 0x8, [0x3f9b, 0x6, 0x4, 0x54c, 0xff, 0x3, 0x0, 0x80000001]}, {0xb52a, 0x1, 0x50c3, [0x40, 0x7, 0x800, 0xffff, 0x7f, 0x6, 0x9]}, {0x3e47, 0xffff800f, 0xffffffff, [0x7, 0x1, 0x0, 0x5169, 0x1000, 0x1, 0x4]}, {0x81, 0x382a, 0x923, [0x5, 0x1, 0x2, 0x2, 0xfffffff8, 0xfff, 0x20, 0x4]}, {0x0, 0x55, 0x7f, [0xcdbc, 0x3, 0x9, 0x100, 0x7f, 0x4, 0x2]}, {0x3, 0x2, 0x4, [0x8a0, 0x80000000, 0x7, 0x40, 0x8000, 0x8000, 0x9, 0x6]}, {0x6, 0x8a1a, 0x10000, [0x2, 0x1f01, 0x5, 0x0, 0x80000000, 0x7, 0x9, 0x4]}]}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:43 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x0, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:43 executing program 3: prctl$PR_SVE_SET_VL(0x32, 0x0) r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x7, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1e, 0x2}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xb5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 19:39:43 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xb5, 0x4d734434, 0x77, 0x9, 0x4}, &(0x7f0000000100)={0x9, 0x621, 0x6, 0x8, 0x100000001, 0x1, 0x5, 0x7fffffffffffffff}, &(0x7f0000000180)={0xd95, 0x8b0, 0x9, 0x6, 0x1, 0x9, 0x96c, 0x5}, &(0x7f0000000200)={r1, r2/1000+60000}) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:43 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0x0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:43 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0xec71412b43ac861d) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:43 executing program 4: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000b40)=0x9, 0x4) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000b00)={0x80000000, &(0x7f0000000100), &(0x7f0000000a80)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x6, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="520001000386c542a861ef4798c822785117940952a4d8ac354b2d4d", @ANYBLOB="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", @ANYBLOB="02002cbd7000fedbdf250b000000080039000100000005003300020000000500330002000000050099000100000008003b0008000000103d4c25a01be1b23f52885e07dfda9098816702f5e8d1a73152306226ebeec0b6962b8d763e72d7b3dc01941ae1f6a485acebd0c93eb05b9b37574e918a9a413cef873bfb2b1b2daa67bf008355d9fb7c50a9ba8e5c717823ca1e31546a9d9f6076dff37e1496d2b4c6f2835cdf1515d8ff38219d8750e8ba0e9690dd"], 0x3c}, 0x1, 0x0, 0x0, 0x4085}, 0x14) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='stack /proc/thread-selxec\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x22) 19:39:43 executing program 2: socket$inet(0x2, 0x2, 0x2) 19:39:43 executing program 3: prctl$PR_SVE_SET_VL(0x32, 0x0) r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x7, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1e, 0x2}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xb5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 19:39:43 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xb5, 0x4d734434, 0x77, 0x9, 0x4}, &(0x7f0000000100)={0x9, 0x621, 0x6, 0x8, 0x100000001, 0x1, 0x5, 0x7fffffffffffffff}, &(0x7f0000000180)={0xd95, 0x8b0, 0x9, 0x6, 0x1, 0x9, 0x96c, 0x5}, &(0x7f0000000200)={r1, r2/1000+60000}) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)) (async) select(0x40, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xb5, 0x4d734434, 0x77, 0x9, 0x4}, &(0x7f0000000100)={0x9, 0x621, 0x6, 0x8, 0x100000001, 0x1, 0x5, 0x7fffffffffffffff}, &(0x7f0000000180)={0xd95, 0x8b0, 0x9, 0x6, 0x1, 0x9, 0x96c, 0x5}, &(0x7f0000000200)={r1, r2/1000+60000}) (async) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:43 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0x0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:43 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0xec71412b43ac861d) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:43 executing program 4: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000b40)=0x9, 0x4) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000b00)={0x80000000, &(0x7f0000000100), &(0x7f0000000a80)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x6, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="520001000386c542a861ef4798c822785117940952a4d8ac354b2d4d", @ANYBLOB="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", @ANYBLOB="02002cbd7000fedbdf250b000000080039000100000005003300020000000500330002000000050099000100000008003b0008000000103d4c25a01be1b23f52885e07dfda9098816702f5e8d1a73152306226ebeec0b6962b8d763e72d7b3dc01941ae1f6a485acebd0c93eb05b9b37574e918a9a413cef873bfb2b1b2daa67bf008355d9fb7c50a9ba8e5c717823ca1e31546a9d9f6076dff37e1496d2b4c6f2835cdf1515d8ff38219d8750e8ba0e9690dd"], 0x3c}, 0x1, 0x0, 0x0, 0x4085}, 0x14) (async) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='stack /proc/thread-selxec\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x22) 19:39:43 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0xec71412b43ac861d) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0xec71412b43ac861d) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 19:39:43 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0x0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:43 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xb5, 0x4d734434, 0x77, 0x9, 0x4}, &(0x7f0000000100)={0x9, 0x621, 0x6, 0x8, 0x100000001, 0x1, 0x5, 0x7fffffffffffffff}, &(0x7f0000000180)={0xd95, 0x8b0, 0x9, 0x6, 0x1, 0x9, 0x96c, 0x5}, &(0x7f0000000200)={r1, r2/1000+60000}) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:43 executing program 3: prctl$PR_SVE_SET_VL(0x32, 0x0) r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x7, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1e, 0x2}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xb5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 19:39:43 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042dbd7000fbdbdf2506000000050006000800000006001c000600000008001794", @ANYRES32, @ANYBLOB="06001d0003000000050004007f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20040081) 19:39:43 executing program 4: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000b40)=0x9, 0x4) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000b00)={0x80000000, &(0x7f0000000100), &(0x7f0000000a80)}) (async, rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x6, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="520001000386c542a861ef4798c822785117940952a4d8ac354b2d4d", @ANYBLOB="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", @ANYBLOB="02002cbd7000fedbdf250b000000080039000100000005003300020000000500330002000000050099000100000008003b0008000000103d4c25a01be1b23f52885e07dfda9098816702f5e8d1a73152306226ebeec0b6962b8d763e72d7b3dc01941ae1f6a485acebd0c93eb05b9b37574e918a9a413cef873bfb2b1b2daa67bf008355d9fb7c50a9ba8e5c717823ca1e31546a9d9f6076dff37e1496d2b4c6f2835cdf1515d8ff38219d8750e8ba0e9690dd"], 0x3c}, 0x1, 0x0, 0x0, 0x4085}, 0x14) (async) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='stack /proc/thread-selxec\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x22) 19:39:43 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:43 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000100), &(0x7f0000000180)=[{{0x80000000}, {0x80000000}}, {{0x80000000}}]}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x287, &(0x7f0000000040)}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={r2, &(0x7f0000000080), &(0x7f00000002c0)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000cc0)={0x0, 0x9, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000700), 0x6, 0x0, &(0x7f0000000b80)=[{}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x2, 0x0, &(0x7f0000000700)=[{}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000d40)={{r3, r4, 0x0, [0x2, 0x9571]}, {r1, r5, 0x6, [0x80000001]}, 0x1, [0x78c]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000000c0)={0x0, 0xfdad51d4c4730519}) r6 = syz_open_dev$dri(&(0x7f0000000240), 0xed, 0x202000) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f0000000280)={0x0, 0x2}) 19:39:43 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'stack ', '\x00'}, 0x7) 19:39:43 executing program 2: socket$inet(0x2, 0x2, 0x1) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042dbd7000fbdbdf2506000000050006000800000006001c000600000008001794", @ANYRES32, @ANYBLOB="06001d0003000000050004007f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20040081) 19:39:43 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:43 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:43 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/xroc/thread-se\xecf/attr/exec\x00'}, 0x22) 19:39:43 executing program 3: r0 = socket(0x25, 0x5, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:43 executing program 2: socket$inet(0x2, 0x2, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042dbd7000fbdbdf2506000000050006000800000006001c000600000008001794", @ANYRES32, @ANYBLOB="06001d0003000000050004007f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20040081) socket$inet(0x2, 0x2, 0x1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042dbd7000fbdbdf2506000000050006000800000006001c000600000008001794", @ANYRES32, @ANYBLOB="06001d0003000000050004007f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20040081) (async) 19:39:43 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000100), &(0x7f0000000180)=[{{0x80000000}, {0x80000000}}, {{0x80000000}}]}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x287, &(0x7f0000000040)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={r2, &(0x7f0000000080), &(0x7f00000002c0)=[{}, {{0x80000000, 0x0}}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000cc0)={0x0, 0x9, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000700), 0x6, 0x0, &(0x7f0000000b80)=[{}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x2, 0x0, &(0x7f0000000700)=[{}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000d40)={{r3, r4, 0x0, [0x2, 0x9571]}, {r1, r5, 0x6, [0x80000001]}, 0x1, [0x78c]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000000c0)={0x0, 0xfdad51d4c4730519}) (async) r6 = syz_open_dev$dri(&(0x7f0000000240), 0xed, 0x202000) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f0000000280)={0x0, 0x2}) 19:39:43 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'stack ', '\x00'}, 0x7) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'stack ', '\x00'}, 0x7) (async) 19:39:43 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:43 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/xroc/thread-se\xecf/attr/exec\x00'}, 0x22) 19:39:43 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:43 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x0, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:44 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000100), &(0x7f0000000180)=[{{0x80000000}, {0x80000000}}, {{0x80000000}}]}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x287, &(0x7f0000000040)}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={r2, &(0x7f0000000080), &(0x7f00000002c0)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000cc0)={0x0, 0x9, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000700), 0x6, 0x0, &(0x7f0000000b80)=[{}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x2, 0x0, &(0x7f0000000700)=[{}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000d40)={{r3, r4, 0x0, [0x2, 0x9571]}, {r1, r5, 0x6, [0x80000001]}, 0x1, [0x78c]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000000c0)={0x0, 0xfdad51d4c4730519}) r6 = syz_open_dev$dri(&(0x7f0000000240), 0xed, 0x202000) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f0000000280)={0x0, 0x2}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000100), &(0x7f0000000180)}) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x287, &(0x7f0000000040)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={r2, &(0x7f0000000080), &(0x7f00000002c0)}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000cc0)={0x0, 0x9, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000700), 0x6, 0x0, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000700)=[{}, {}]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000d40)={{r3, r4, 0x0, [0x2, 0x9571]}, {r1, r5, 0x6, [0x80000001]}, 0x1, [0x78c]}) (async) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000000c0)={0x0, 0xfdad51d4c4730519}) (async) syz_open_dev$dri(&(0x7f0000000240), 0xed, 0x202000) (async) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f0000000280)={0x0, 0x2}) (async) 19:39:44 executing program 2: socket$inet(0x2, 0x6, 0x7) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000200), 0x5, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}]}) 19:39:44 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'stack ', '\x00'}, 0x7) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'stack ', '\x00'}, 0x7) (async) 19:39:44 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/xroc/thread-se\xecf/attr/exec\x00'}, 0x22) 19:39:44 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 19:39:44 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x0, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:44 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:44 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) times(&(0x7f0000000040)) 19:39:44 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) (async) 19:39:44 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0xc0000009, &(0x7f0000000000)="7bdf7f0c36942d6da6cfc57263626aeca700ad5b690e6e55c1f7f728179d5a2223baa1cb9af821ed717e4c2f61db06cc20175c8928a63db7ff9437b0ea648bb0903c6f75bfcb444ed0641af11c86d1c4ac91cfa2daf5975eb536e7283853eff62544a65463801c302f2dead48d5228ad1964e7d312649d05397fd4c397614a0fc9862644e296fba27f9dfeccd2dcfc2ffe4c0e1293a87fce4e4913ce50dd7fa87ce5f3d1c94ae0b2745becd25f64a46a7801d8c3f52b7285eb0cc65f509fd642a4") 19:39:44 executing program 2: socket$inet(0x2, 0x6, 0x7) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000200), 0x5, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}]}) socket$inet(0x2, 0x6, 0x7) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) (async) pipe2$watch_queue(&(0x7f0000000200), 0x80) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000200), 0x5, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}]}) (async) 19:39:44 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x0, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:44 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 19:39:44 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) times(&(0x7f0000000040)) (rerun: 32) 19:39:44 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:44 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0xc0000009, &(0x7f0000000000)="7bdf7f0c36942d6da6cfc57263626aeca700ad5b690e6e55c1f7f728179d5a2223baa1cb9af821ed717e4c2f61db06cc20175c8928a63db7ff9437b0ea648bb0903c6f75bfcb444ed0641af11c86d1c4ac91cfa2daf5975eb536e7283853eff62544a65463801c302f2dead48d5228ad1964e7d312649d05397fd4c397614a0fc9862644e296fba27f9dfeccd2dcfc2ffe4c0e1293a87fce4e4913ce50dd7fa87ce5f3d1c94ae0b2745becd25f64a46a7801d8c3f52b7285eb0cc65f509fd642a4") 19:39:44 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x0, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:44 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:44 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:44 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) times(&(0x7f0000000040)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) times(&(0x7f0000000040)) (async) 19:39:44 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0xc0000009, &(0x7f0000000000)="7bdf7f0c36942d6da6cfc57263626aeca700ad5b690e6e55c1f7f728179d5a2223baa1cb9af821ed717e4c2f61db06cc20175c8928a63db7ff9437b0ea648bb0903c6f75bfcb444ed0641af11c86d1c4ac91cfa2daf5975eb536e7283853eff62544a65463801c302f2dead48d5228ad1964e7d312649d05397fd4c397614a0fc9862644e296fba27f9dfeccd2dcfc2ffe4c0e1293a87fce4e4913ce50dd7fa87ce5f3d1c94ae0b2745becd25f64a46a7801d8c3f52b7285eb0cc65f509fd642a4") 19:39:44 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x0, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:44 executing program 2: socket$inet(0x2, 0x6, 0x7) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000200), 0x5, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}]}) socket$inet(0x2, 0x6, 0x7) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) (async) pipe2$watch_queue(&(0x7f0000000200), 0x80) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000200), 0x5, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}]}) (async) 19:39:44 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) (async) r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:44 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '/proc/thread-self/attr/exeC\x00\x89;\xce\xa9\xed\xbbf\xc4;\\_\x9cZ\x1c\xa6\xf6\xc5\xebM\xe3\xb7>\x84o\x0f5\xe5\xe7X\xdc\xbb\xf5\x9a}\x14\xa8\xd0\xc5\xaf\xdeiGL\xa6\xfd\xf8\xc1\xee\x117\xd3{?\x9bi\x97\xeb\xa6\x93\x91\xcd\xcc\x1d\x9a\x03.\x90\xcf\xa9\xbf\xa3\x88Q\"MR\x18P'}, 0x70) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) 19:39:44 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xba82}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040891}, 0x20008010) 19:39:44 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x0, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:44 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) socket$phonet_pipe(0x23, 0x5, 0x2) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = add_key(&(0x7f00000009c0)='.dead\x00', &(0x7f0000000a00)={'syz', 0x2}, &(0x7f0000000a40)="738106835f5b1c0bba87b027e26f3640098d2c8aeb3e343b259f0c1a52d808dfb54bb0ffe226566e6b4dccd226753f4c0b8c09234abe515edb3733f3b34cc3f5b543629833e8847e6b3c05c7b0394061465bfd97144f20a8a569d634245d10672fc4312a5afa1a28f99996c8c22f323458510e25aa23209837d4d6311208f4570a8dbbf5be7a91463a7e761d395dba3dc8ebaf6983b377b66667a76fd334e65a6ff230207cb13a923d23e27ac2523d0049eb03e2720cb52a1c14ff02bf27fc599398cc042ea45ccc57bff489605dc441ba8f84f5c5c57fd40730c7956312a0d9a1f36d55faed6a456426145542445e09dffdbe8b69376ead78", 0xf9, 0xfffffffffffffffa) keyctl$unlink(0x9, r4, 0x0) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f0000000b80)=ANY=[@ANYBLOB="65b10066216ca01369953aaebb67e1351346bf9a7b4c74b69645d747013fc3f467cb2da6b85f0b6e4de23ff91fa2828ff75b9dc9649215bcc10292d2c2e84ca1a95b0e0a3ea5c97ccffab5500391826bb6973c0ea495ef3f8f736b3d89de50ca837e8f149603acb39a96b7f49a0d1606c64d6d8ba533ed1cf6ed9ef80796e1a377bc8dd8"], 0x6) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x18c, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/76, 0x4c, 0x2, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/248, 0xf8, 0x2, 0x26}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}, @enter_looper, @exit_looper, @increfs={0x40046304, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x6, 0x1, 0x4}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@flat=@weak_handle={0x77682a85, 0x1100}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/120, 0x78, 0x2, 0x33}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@fda={0x66646185, 0x4, 0x2, 0xd}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/22, 0x16, 0x2, 0x23}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000006c0)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x2}, @release], 0x26, 0x0, &(0x7f00000008c0)="f569b5c49cebda5fc32e52c18fb2072284e50f8bbaaf02f04f959bba9169fe61f2df98eb9b1f"}) 19:39:44 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:44 executing program 2: socket$inet(0x2, 0x3, 0xfffff800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4048091) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8008) 19:39:44 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '/proc/thread-self/attr/exeC\x00\x89;\xce\xa9\xed\xbbf\xc4;\\_\x9cZ\x1c\xa6\xf6\xc5\xebM\xe3\xb7>\x84o\x0f5\xe5\xe7X\xdc\xbb\xf5\x9a}\x14\xa8\xd0\xc5\xaf\xdeiGL\xa6\xfd\xf8\xc1\xee\x117\xd3{?\x9bi\x97\xeb\xa6\x93\x91\xcd\xcc\x1d\x9a\x03.\x90\xcf\xa9\xbf\xa3\x88Q\"MR\x18P'}, 0x70) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) 19:39:44 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xba82}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040891}, 0x20008010) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xba82}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040891}, 0x20008010) (async) 19:39:44 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x0) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:44 executing program 2: socket$inet(0x2, 0x3, 0xfffff800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4048091) (async) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8008) 19:39:44 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) 19:39:44 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r4 = add_key(&(0x7f00000009c0)='.dead\x00', &(0x7f0000000a00)={'syz', 0x2}, &(0x7f0000000a40)="738106835f5b1c0bba87b027e26f3640098d2c8aeb3e343b259f0c1a52d808dfb54bb0ffe226566e6b4dccd226753f4c0b8c09234abe515edb3733f3b34cc3f5b543629833e8847e6b3c05c7b0394061465bfd97144f20a8a569d634245d10672fc4312a5afa1a28f99996c8c22f323458510e25aa23209837d4d6311208f4570a8dbbf5be7a91463a7e761d395dba3dc8ebaf6983b377b66667a76fd334e65a6ff230207cb13a923d23e27ac2523d0049eb03e2720cb52a1c14ff02bf27fc599398cc042ea45ccc57bff489605dc441ba8f84f5c5c57fd40730c7956312a0d9a1f36d55faed6a456426145542445e09dffdbe8b69376ead78", 0xf9, 0xfffffffffffffffa) (rerun: 64) keyctl$unlink(0x9, r4, 0x0) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f0000000b80)=ANY=[@ANYBLOB="65b10066216ca01369953aaebb67e1351346bf9a7b4c74b69645d747013fc3f467cb2da6b85f0b6e4de23ff91fa2828ff75b9dc9649215bcc10292d2c2e84ca1a95b0e0a3ea5c97ccffab5500391826bb6973c0ea495ef3f8f736b3d89de50ca837e8f149603acb39a96b7f49a0d1606c64d6d8ba533ed1cf6ed9ef80796e1a377bc8dd8"], 0x6) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x18c, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/76, 0x4c, 0x2, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/248, 0xf8, 0x2, 0x26}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}, @enter_looper, @exit_looper, @increfs={0x40046304, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x6, 0x1, 0x4}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@flat=@weak_handle={0x77682a85, 0x1100}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/120, 0x78, 0x2, 0x33}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@fda={0x66646185, 0x4, 0x2, 0xd}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/22, 0x16, 0x2, 0x23}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000006c0)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x2}, @release], 0x26, 0x0, &(0x7f00000008c0)="f569b5c49cebda5fc32e52c18fb2072284e50f8bbaaf02f04f959bba9169fe61f2df98eb9b1f"}) 19:39:44 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '/proc/thread-self/attr/exeC\x00\x89;\xce\xa9\xed\xbbf\xc4;\\_\x9cZ\x1c\xa6\xf6\xc5\xebM\xe3\xb7>\x84o\x0f5\xe5\xe7X\xdc\xbb\xf5\x9a}\x14\xa8\xd0\xc5\xaf\xdeiGL\xa6\xfd\xf8\xc1\xee\x117\xd3{?\x9bi\x97\xeb\xa6\x93\x91\xcd\xcc\x1d\x9a\x03.\x90\xcf\xa9\xbf\xa3\x88Q\"MR\x18P'}, 0x70) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '/proc/thread-self/attr/exeC\x00\x89;\xce\xa9\xed\xbbf\xc4;\\_\x9cZ\x1c\xa6\xf6\xc5\xebM\xe3\xb7>\x84o\x0f5\xe5\xe7X\xdc\xbb\xf5\x9a}\x14\xa8\xd0\xc5\xaf\xdeiGL\xa6\xfd\xf8\xc1\xee\x117\xd3{?\x9bi\x97\xeb\xa6\x93\x91\xcd\xcc\x1d\x9a\x03.\x90\xcf\xa9\xbf\xa3\x88Q\"MR\x18P'}, 0x70) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) (async) 19:39:44 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xba82}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040891}, 0x20008010) 19:39:44 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x0) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:44 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) 19:39:44 executing program 2: socket$inet(0x2, 0x3, 0xfffff800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4048091) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8008) socket$inet(0x2, 0x3, 0xfffff800) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4048091) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x14) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8008) (async) 19:39:44 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737461636b202f7072060000006872bd45a133f320bac4b2f833c680ad7190f01b656c31ea2ef0368430fe1c5dceaaae666fbc662f6100747245138f7b6300"], 0x32) 19:39:44 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:44 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) socket(0x25, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) (async) 19:39:44 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async, rerun: 32) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000002c0)) (async) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r4 = add_key(&(0x7f00000009c0)='.dead\x00', &(0x7f0000000a00)={'syz', 0x2}, &(0x7f0000000a40)="738106835f5b1c0bba87b027e26f3640098d2c8aeb3e343b259f0c1a52d808dfb54bb0ffe226566e6b4dccd226753f4c0b8c09234abe515edb3733f3b34cc3f5b543629833e8847e6b3c05c7b0394061465bfd97144f20a8a569d634245d10672fc4312a5afa1a28f99996c8c22f323458510e25aa23209837d4d6311208f4570a8dbbf5be7a91463a7e761d395dba3dc8ebaf6983b377b66667a76fd334e65a6ff230207cb13a923d23e27ac2523d0049eb03e2720cb52a1c14ff02bf27fc599398cc042ea45ccc57bff489605dc441ba8f84f5c5c57fd40730c7956312a0d9a1f36d55faed6a456426145542445e09dffdbe8b69376ead78", 0xf9, 0xfffffffffffffffa) keyctl$unlink(0x9, r4, 0x0) (async) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f0000000b80)=ANY=[@ANYBLOB="65b10066216ca01369953aaebb67e1351346bf9a7b4c74b69645d747013fc3f467cb2da6b85f0b6e4de23ff91fa2828ff75b9dc9649215bcc10292d2c2e84ca1a95b0e0a3ea5c97ccffab5500391826bb6973c0ea495ef3f8f736b3d89de50ca837e8f149603acb39a96b7f49a0d1606c64d6d8ba533ed1cf6ed9ef80796e1a377bc8dd8"], 0x6) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x18c, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/76, 0x4c, 0x2, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/248, 0xf8, 0x2, 0x26}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}, @enter_looper, @exit_looper, @increfs={0x40046304, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x6, 0x1, 0x4}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@flat=@weak_handle={0x77682a85, 0x1100}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/120, 0x78, 0x2, 0x33}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@fda={0x66646185, 0x4, 0x2, 0xd}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/22, 0x16, 0x2, 0x23}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000006c0)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x2}, @release], 0x26, 0x0, &(0x7f00000008c0)="f569b5c49cebda5fc32e52c18fb2072284e50f8bbaaf02f04f959bba9169fe61f2df98eb9b1f"}) (rerun: 64) 19:39:44 executing program 2: sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet(0x2, 0x2, 0x1) 19:39:44 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x0) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:44 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737461636b202f7072060000006872bd45a133f320bac4b2f833c680ad7190f01b656c31ea2ef0368430fe1c5dceaaae666fbc662f6100747245138f7b6300"], 0x32) 19:39:44 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 19:39:44 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/121}) 19:39:44 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:44 executing program 2: sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$inet(0x2, 0x2, 0x1) (async) 19:39:44 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737461636b202f7072060000006872bd45a133f320bac4b2f833c680ad7190f01b656c31ea2ef0368430fe1c5dceaaae666fbc662f6100747245138f7b6300"], 0x32) 19:39:44 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:44 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/121}) 19:39:44 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 19:39:44 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0def1a766b822c8a076f6bf156ed1b0000000073656c662f617474722f6578b39e05b86563007eecb4e4fda0086e9e58c5696d4fa39673917f5a2a20b302e9638a413491ce6e5afd5bcd3fbfef2f247f", @ANYRESOCT=r0], 0x22) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 19:39:44 executing program 2: sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$inet(0x2, 0x2, 0x1) (async) 19:39:44 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19:39:45 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0def1a766b822c8a076f6bf156ed1b0000000073656c662f617474722f6578b39e05b86563007eecb4e4fda0086e9e58c5696d4fa39673917f5a2a20b302e9638a413491ce6e5afd5bcd3fbfef2f247f", @ANYRESOCT=r0], 0x22) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 19:39:45 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 19:39:45 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/121}) socket(0x25, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/121}) (async) 19:39:45 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:45 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0x2, 0x3}, 0x20) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:45 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 19:39:45 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000003c0)=@chain) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "ab0f1e9f9e1d5efd31e14df10dbd562ca79642d6135e74de70999c94882c41ed9cbd1b659b5d4a0c16269a086646740126ba5438dab943f7d9d71645004ae7ee", 0x3a}, 0x48, r0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x804, 0xffdffffe) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c010004", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf240e0000000800320007000000050029000000000005002a0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) 19:39:45 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0def1a766b822c8a076f6bf156ed1b0000000073656c662f617474722f6578b39e05b86563007eecb4e4fda0086e9e58c5696d4fa39673917f5a2a20b302e9638a413491ce6e5afd5bcd3fbfef2f247f", @ANYRESOCT=r0], 0x22) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 19:39:45 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0x2, 0x3}, 0x20) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:45 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, 0x0, &(0x7f0000000100)) 19:39:45 executing program 4: write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{}, 0x16, 0x2d33, 0x6}, 0x18) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='stack /proc/thread-sef/attr/exec\x00\x00'], 0x22) 19:39:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4084) r1 = socket(0x29, 0x5, 0x13) r2 = accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) accept$packet(r2, &(0x7f0000000480), &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = socket(0x27, 0x6, 0xff) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x50000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf272}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x25}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x10) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) recvfrom$l2tp6(r4, &(0x7f0000000000)=""/81, 0x51, 0x20012000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x20) 19:39:45 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:45 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0x2, 0x3}, 0x20) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:45 executing program 4: write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{}, 0x16, 0x2d33, 0x6}, 0x18) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='stack /proc/thread-sef/attr/exec\x00\x00'], 0x22) 19:39:45 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, 0x0, &(0x7f0000000100)) 19:39:45 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000003c0)=@chain) (async) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "ab0f1e9f9e1d5efd31e14df10dbd562ca79642d6135e74de70999c94882c41ed9cbd1b659b5d4a0c16269a086646740126ba5438dab943f7d9d71645004ae7ee", 0x3a}, 0x48, r0) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) socket$inet(0x2, 0x804, 0xffdffffe) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c010004", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf240e0000000800320007000000050029000000000005002a0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) 19:39:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4084) (async) r1 = socket(0x29, 0x5, 0x13) r2 = accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) accept$packet(r2, &(0x7f0000000480), &(0x7f00000004c0)=0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) r4 = socket(0x27, 0x6, 0xff) (async) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x50000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf272}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x25}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x10) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) (async) recvfrom$l2tp6(r4, &(0x7f0000000000)=""/81, 0x51, 0x20012000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x20) 19:39:45 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:45 executing program 4: write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{}, 0x16, 0x2d33, 0x6}, 0x18) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='stack /proc/thread-sef/attr/exec\x00\x00'], 0x22) 19:39:45 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, 0x0, &(0x7f0000000100)) 19:39:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4084) r1 = socket(0x29, 0x5, 0x13) r2 = accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) accept$packet(r2, &(0x7f0000000480), &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = socket(0x27, 0x6, 0xff) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x50000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf272}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x25}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x10) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) recvfrom$l2tp6(r4, &(0x7f0000000000)=""/81, 0x51, 0x20012000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4084) (async) socket(0x29, 0x5, 0x13) (async) accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) (async) accept$packet(r2, &(0x7f0000000480), &(0x7f00000004c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) socket(0x27, 0x6, 0xff) (async) syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x50000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf272}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x25}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x10) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) (async) recvfrom$l2tp6(r4, &(0x7f0000000000)=""/81, 0x51, 0x20012000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x20) (async) 19:39:45 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)=""/238, &(0x7f0000000180)=0xee) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) 19:39:45 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:45 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), 0x0) 19:39:45 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:45 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000003c0)=@chain) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "ab0f1e9f9e1d5efd31e14df10dbd562ca79642d6135e74de70999c94882c41ed9cbd1b659b5d4a0c16269a086646740126ba5438dab943f7d9d71645004ae7ee", 0x3a}, 0x48, r0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x804, 0xffdffffe) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c010004", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf240e0000000800320007000000050029000000000005002a0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "891afe870c7d51262cd1b161867cbfcd93bca8e98273d365500bfd00a29f6d10567eb5cc98de2c1faddc719770b2cc38772fb1ea58923eda686454b9e4c9551b"}, 0x48, 0xfffffffffffffffd) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000003c0)=@chain) (async) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "ab0f1e9f9e1d5efd31e14df10dbd562ca79642d6135e74de70999c94882c41ed9cbd1b659b5d4a0c16269a086646740126ba5438dab943f7d9d71645004ae7ee", 0x3a}, 0x48, r0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet(0x2, 0x804, 0xffdffffe) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c010004", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf240e0000000800320007000000050029000000000005002a0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) (async) 19:39:45 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)=""/238, &(0x7f0000000180)=0xee) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)=""/238, &(0x7f0000000180)=0xee) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x80800) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) (async) 19:39:45 executing program 3: r0 = socket(0x25, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/74}) 19:39:45 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:45 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), 0x0) 19:39:45 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1, 0x1, 0xfd, 0x6, @multicast}, 0x14) 19:39:45 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:45 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), 0x0) 19:39:45 executing program 3: r0 = socket(0x25, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/74}) socket(0x25, 0x2, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/74}) (async) 19:39:45 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)=""/238, &(0x7f0000000180)=0xee) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) 19:39:45 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1, 0x1, 0xfd, 0x6, @multicast}, 0x14) 19:39:45 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) (async) 19:39:45 executing program 3: r0 = socket(0x25, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/74}) socket(0x25, 0x2, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/74}) (async) 19:39:45 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), 0x0) 19:39:45 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:45 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:45 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x810800) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x10000000000773, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="5d6396", 0x3}) r1 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) 19:39:45 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="737461636b202f70726f632f7401726561642d73656c662f61747497342a4678f43172307bc61431114a722f6578656300a7834ab2f77db4ef9a6b97babbfdaed53f64bffbdaa50523c6f06260b32e2072db890f442cdbf8e12c2f87295dc68910a898274e0a0eef3828279d179fe6cf00d3e0c88f0710b825f6e92288d3e6a9c837f623b2eb799ea8dac614abd693436cb525a33cd8de651d7f3bc1ef5b106186bda6e72a77e496dbc2461a22772db4948f90340009918bf5232331d32cf19f2454"], 0x22) 19:39:45 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1, 0x1, 0xfd, 0x6, @multicast}, 0x14) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1, 0x1, 0xfd, 0x6, @multicast}, 0x14) (async) 19:39:45 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x27, 0x0, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:45 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64) 19:39:45 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:45 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x810800) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x10000000000773, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="5d6396", 0x3}) (async, rerun: 32) r1 = socket(0x25, 0x5, 0x0) (rerun: 32) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) 19:39:45 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0, 0x9}, 0x10) r1 = socket(0x0, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:45 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="737461636b202f70726f632f7401726561642d73656c662f61747497342a4678f43172307bc61431114a722f6578656300a7834ab2f77db4ef9a6b97babbfdaed53f64bffbdaa50523c6f06260b32e2072db890f442cdbf8e12c2f87295dc68910a898274e0a0eef3828279d179fe6cf00d3e0c88f0710b825f6e92288d3e6a9c837f623b2eb799ea8dac614abd693436cb525a33cd8de651d7f3bc1ef5b106186bda6e72a77e496dbc2461a22772db4948f90340009918bf5232331d32cf19f2454"], 0x22) 19:39:45 executing program 0: r0 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000280)='*\x00', 0xfffffffffffffff8) keyctl$revoke(0x3, r0) socket$packet(0x11, 0x1, 0x300) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="1f012f48e6983ba39da7d336c7a9a40485f7e82a33a2b923668d42a5f768c9925ef63b83b81d0bf2087b07067bc2f1887e4e5341f1982d1e35c89d4e69288772f961a00a2701dd7a1841a1e083053b3e82f284e57ba30813c5dc0e02916c9f4d8acd952055afcb", 0x67, 0xfffffffffffffffb) r2 = request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', r1) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "5192bfd526f061b7c654634d18b950703f11512e610980bf07e60860e263569f592163ecae56798de132b1a1d05b7938b0d9fd7baacfe216f7ecf0c1b4adc4e2", 0x11}, 0x48, r2) keyctl$set_timeout(0xf, r1, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:45 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) (rerun: 64) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="737461636b202f70726f632f7401726561642d73656c662f61747497342a4678f43172307bc61431114a722f6578656300a7834ab2f77db4ef9a6b97babbfdaed53f64bffbdaa50523c6f06260b32e2072db890f442cdbf8e12c2f87295dc68910a898274e0a0eef3828279d179fe6cf00d3e0c88f0710b825f6e92288d3e6a9c837f623b2eb799ea8dac614abd693436cb525a33cd8de651d7f3bc1ef5b106186bda6e72a77e496dbc2461a22772db4948f90340009918bf5232331d32cf19f2454"], 0x22) 19:39:45 executing program 0: r0 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000280)='*\x00', 0xfffffffffffffff8) keyctl$revoke(0x3, r0) (async) socket$packet(0x11, 0x1, 0x300) (async) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="1f012f48e6983ba39da7d336c7a9a40485f7e82a33a2b923668d42a5f768c9925ef63b83b81d0bf2087b07067bc2f1887e4e5341f1982d1e35c89d4e69288772f961a00a2701dd7a1841a1e083053b3e82f284e57ba30813c5dc0e02916c9f4d8acd952055afcb", 0x67, 0xfffffffffffffffb) r2 = request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', r1) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "5192bfd526f061b7c654634d18b950703f11512e610980bf07e60860e263569f592163ecae56798de132b1a1d05b7938b0d9fd7baacfe216f7ecf0c1b4adc4e2", 0x11}, 0x48, r2) (async) keyctl$set_timeout(0xf, r1, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:45 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x810800) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x10000000000773, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="5d6396", 0x3}) r1 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x810800) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x10000000000773, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="5d6396", 0x3}) (async) socket(0x25, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) 19:39:45 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:45 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:45 executing program 1: r0 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000280)='*\x00', 0xfffffffffffffff8) keyctl$revoke(0x3, r0) socket$packet(0x11, 0x1, 0x300) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="1f012f48e6983ba39da7d336c7a9a40485f7e82a33a2b923668d42a5f768c9925ef63b83b81d0bf2087b07067bc2f1887e4e5341f1982d1e35c89d4e69288772f961a00a2701dd7a1841a1e083053b3e82f284e57ba30813c5dc0e02916c9f4d8acd952055afcb", 0x67, 0xfffffffffffffffb) r2 = request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', r1) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "5192bfd526f061b7c654634d18b950703f11512e610980bf07e60860e263569f592163ecae56798de132b1a1d05b7938b0d9fd7baacfe216f7ecf0c1b4adc4e2", 0x11}, 0x48, r2) keyctl$set_timeout(0xf, r1, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:46 executing program 0: r0 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000280)='*\x00', 0xfffffffffffffff8) keyctl$revoke(0x3, r0) socket$packet(0x11, 0x1, 0x300) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="1f012f48e6983ba39da7d336c7a9a40485f7e82a33a2b923668d42a5f768c9925ef63b83b81d0bf2087b07067bc2f1887e4e5341f1982d1e35c89d4e69288772f961a00a2701dd7a1841a1e083053b3e82f284e57ba30813c5dc0e02916c9f4d8acd952055afcb", 0x67, 0xfffffffffffffffb) r2 = request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', r1) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "5192bfd526f061b7c654634d18b950703f11512e610980bf07e60860e263569f592163ecae56798de132b1a1d05b7938b0d9fd7baacfe216f7ecf0c1b4adc4e2", 0x11}, 0x48, r2) keyctl$set_timeout(0xf, r1, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000280)='*\x00', 0xfffffffffffffff8) (async) keyctl$revoke(0x3, r0) (async) socket$packet(0x11, 0x1, 0x300) (async) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="1f012f48e6983ba39da7d336c7a9a40485f7e82a33a2b923668d42a5f768c9925ef63b83b81d0bf2087b07067bc2f1887e4e5341f1982d1e35c89d4e69288772f961a00a2701dd7a1841a1e083053b3e82f284e57ba30813c5dc0e02916c9f4d8acd952055afcb", 0x67, 0xfffffffffffffffb) (async) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', r1) (async) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "5192bfd526f061b7c654634d18b950703f11512e610980bf07e60860e263569f592163ecae56798de132b1a1d05b7938b0d9fd7baacfe216f7ecf0c1b4adc4e2", 0x11}, 0x48, r2) (async) keyctl$set_timeout(0xf, r1, 0x8) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:46 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)) 19:39:46 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x6, 0xa0}, 0x10) r1 = socket(0x27, 0x800, 0x7fff) getpeername$l2tp6(r1, &(0x7f00000001c0), &(0x7f0000000100)=0xffffffffffffffd2) 19:39:46 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket(0x21, 0xa, 0x1) getsockopt$packet_int(r1, 0x107, 0x5d805a80e9f932bf, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:46 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:46 executing program 2: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)) (async) 19:39:46 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:46 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:46 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r1 = socket(0x21, 0xa, 0x1) getsockopt$packet_int(r1, 0x107, 0x5d805a80e9f932bf, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:46 executing program 2: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:46 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)) 19:39:46 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 2: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket(0x25, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) 19:39:46 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket(0x21, 0xa, 0x1) getsockopt$packet_int(r1, 0x107, 0x5d805a80e9f932bf, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) socket(0x21, 0xa, 0x1) (async) getsockopt$packet_int(r1, 0x107, 0x5d805a80e9f932bf, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) 19:39:46 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000180)=""/4096}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000080)={0x0, 0x10001}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:46 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000180)=""/4096}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000080)={0x0, 0x10001}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:46 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:46 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000080)="82ae381198fcaea828c8c0ddbfb35842272a639414d34f8ca9b37f6a563abb2cd15f794b7e1007d8e8fab87ceb6a1e556f15f93b2ceb6c14ddf1be2f2885773cdbee3680e8109dec15362c2bedf1e6525e5db38543be7ef4b7dd65d8a42a7bfc5cae8e5c9126421844c4590e2edceeab3f4c11b4a866d7", 0x77) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:46 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="737461636b202f70726f632f8168726561642d73656c662f617474722f6578656300"], 0x22) 19:39:46 executing program 1: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 5: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000180)=""/4096}) (async) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000080)={0x0, 0x10001}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:46 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 3: r0 = socket(0x25, 0x5, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000080)="82ae381198fcaea828c8c0ddbfb35842272a639414d34f8ca9b37f6a563abb2cd15f794b7e1007d8e8fab87ceb6a1e556f15f93b2ceb6c14ddf1be2f2885773cdbee3680e8109dec15362c2bedf1e6525e5db38543be7ef4b7dd65d8a42a7bfc5cae8e5c9126421844c4590e2edceeab3f4c11b4a866d7", 0x77) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:39:46 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000040)={0x8}) 19:39:46 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="737461636b202f70726f632f8168726561642d73656c662f617474722f6578656300"], 0x22) 19:39:46 executing program 1: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000040)={0x8}) 19:39:46 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="737461636b202f70726f632f8168726561642d73656c662f617474722f6578656300"], 0x22) 19:39:46 executing program 1: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000140)={r1, &(0x7f0000001180)=""/4092}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:46 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000040)={0x8}) 19:39:46 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000080)="82ae381198fcaea828c8c0ddbfb35842272a639414d34f8ca9b37f6a563abb2cd15f794b7e1007d8e8fab87ceb6a1e556f15f93b2ceb6c14ddf1be2f2885773cdbee3680e8109dec15362c2bedf1e6525e5db38543be7ef4b7dd65d8a42a7bfc5cae8e5c9126421844c4590e2edceeab3f4c11b4a866d7", 0x77) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) socket(0x25, 0x5, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000080)="82ae381198fcaea828c8c0ddbfb35842272a639414d34f8ca9b37f6a563abb2cd15f794b7e1007d8e8fab87ceb6a1e556f15f93b2ceb6c14ddf1be2f2885773cdbee3680e8109dec15362c2bedf1e6525e5db38543be7ef4b7dd65d8a42a7bfc5cae8e5c9126421844c4590e2edceeab3f4c11b4a866d7", 0x77) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) 19:39:46 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x882, 0x6, 0x49, 0x7, 0x3, 0x1}, 0x1c) 19:39:46 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000000)="fbe349e356d8174599c31f65d307") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19:39:46 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async, rerun: 64) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) (async, rerun: 64) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000140)={r1, &(0x7f0000001180)=""/4092}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19:39:46 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x200, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000440)={0x0, 0x4, 0x0, &(0x7f0000000040)=[{0x80000000}, {}, {0x80000000}, {}], 0x3, 0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x4, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}]}) r4 = socket(0x11, 0x4, 0xfffffffe) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000001180)={r2, &(0x7f00000010c0)=[{}, {0x80000000}], &(0x7f0000001100)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001740)={0x0, 0x2, 0x0, &(0x7f00000011c0)=[{}, {}], 0x7, 0x0, &(0x7f0000001280)=[{}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f00000015c0)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000001700)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f00000017c0)={{r2, r3, 0x6, [0x4, 0xda]}, {r6, r7, 0x6, [0x4, 0xac]}, 0x10000000, [0x7, 0x1]}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000b80)={0x0, 0x6, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000009c0)=[{0x0, 0x80000000}, {}, {}], 0x7, 0x0, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000cc0)={r1, &(0x7f0000000c00), &(0x7f0000000c40)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001000)={0x0, 0x1, 0x0, &(0x7f0000000d00)=[{}], 0x2, 0x0, &(0x7f0000000d80)=[{}, {}], 0x4, 0x0, &(0x7f0000000e80)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x5, 0x0, &(0x7f0000000f00)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001080)={{r8, r3, 0x1, [0x9820, 0x3]}, {r9, r10, 0x1, [0x7, 0x3]}, 0x10000002, [0x6, 0x7]}) 19:39:46 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x882, 0x6, 0x49, 0x7, 0x3, 0x1}, 0x1c) 19:39:46 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000000)="fbe349e356d8174599c31f65d307") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 1327.669321] kauditd_printk_skb: 68 callbacks suppressed [ 1327.669327] audit: type=1400 audit(1658864386.655:157): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=17146 comm="syz-executor.4" 19:39:46 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x200, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000440)={0x0, 0x4, 0x0, &(0x7f0000000040)=[{0x80000000}, {}, {0x80000000}, {}], 0x3, 0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x4, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}]}) (async, rerun: 32) r4 = socket(0x11, 0x4, 0xfffffffe) (async, rerun: 32) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000001180)={r2, &(0x7f00000010c0)=[{}, {0x80000000}], &(0x7f0000001100)}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001740)={0x0, 0x2, 0x0, &(0x7f00000011c0)=[{}, {}], 0x7, 0x0, &(0x7f0000001280)=[{}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f00000015c0)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000001700)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f00000017c0)={{r2, r3, 0x6, [0x4, 0xda]}, {r6, r7, 0x6, [0x4, 0xac]}, 0x10000000, [0x7, 0x1]}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000b80)={0x0, 0x6, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000009c0)=[{0x0, 0x80000000}, {}, {}], 0x7, 0x0, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000cc0)={r1, &(0x7f0000000c00), &(0x7f0000000c40)=[{}, {{}, {0x80000000}}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001000)={0x0, 0x1, 0x0, &(0x7f0000000d00)=[{}], 0x2, 0x0, &(0x7f0000000d80)=[{}, {}], 0x4, 0x0, &(0x7f0000000e80)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x5, 0x0, &(0x7f0000000f00)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001080)={{r8, r3, 0x1, [0x9820, 0x3]}, {r9, r10, 0x1, [0x7, 0x3]}, 0x10000002, [0x6, 0x7]}) 19:39:46 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000140)={r1, &(0x7f0000001180)=""/4092}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000140)={r1, &(0x7f0000001180)=""/4092}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 19:39:46 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x882, 0x6, 0x49, 0x7, 0x3, 0x1}, 0x1c) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x882, 0x6, 0x49, 0x7, 0x3, 0x1}, 0x1c) (async) 19:39:46 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) [ 1327.802862] audit: type=1400 audit(1658864386.785:158): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=17160 comm="syz-executor.4" 19:39:46 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000000)="fbe349e356d8174599c31f65d307") (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19:39:46 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffff8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000810) 19:39:46 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 19:39:46 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x200, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000440)={0x0, 0x4, 0x0, &(0x7f0000000040)=[{0x80000000}, {}, {0x80000000}, {}], 0x3, 0x0, &(0x7f00000001c0)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x4, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}]}) r4 = socket(0x11, 0x4, 0xfffffffe) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000001180)={r2, &(0x7f00000010c0)=[{}, {0x80000000}], &(0x7f0000001100)}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001740)={0x0, 0x2, 0x0, &(0x7f00000011c0)=[{}, {}], 0x7, 0x0, &(0x7f0000001280)=[{}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f00000015c0)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000001700)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f00000017c0)={{r2, r3, 0x6, [0x4, 0xda]}, {r6, r7, 0x6, [0x4, 0xac]}, 0x10000000, [0x7, 0x1]}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000b80)={0x0, 0x6, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000009c0)=[{0x0, 0x80000000}, {}, {}], 0x7, 0x0, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000cc0)={r1, &(0x7f0000000c00), &(0x7f0000000c40)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001000)={0x0, 0x1, 0x0, &(0x7f0000000d00)=[{}], 0x2, 0x0, &(0x7f0000000d80)=[{}, {}], 0x4, 0x0, &(0x7f0000000e80)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x5, 0x0, &(0x7f0000000f00)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001080)={{r8, r3, 0x1, [0x9820, 0x3]}, {r9, r10, 0x1, [0x7, 0x3]}, 0x10000002, [0x6, 0x7]}) 19:39:46 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000180)=""/32, 0x20}], 0x3, &(0x7f0000000280)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0x3}, &(0x7f0000000200), &(0x7f0000000240)=0xfffffffffffff9c0, 0x8, 0x9, 0x5, 0x100, 0xe, 0x7}}], 0x58, 0x20000084}, 0x20000000) 19:39:46 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 19:39:46 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:46 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="737461636b202f70726f632f7468726561642d73656c662f617474722f6578655b00bd2bd2229c4c12fe6069da7519b4fd4c22494cbce0aca8e1e43b65f838a3223006b9df17ef59518a4f3daf376e792fe8ddda1c8c81d7f9f461db83dfbfa415607d3eb083cd9b832d3ace2c383ffdfff7c80bf1883d22786c7bc56a891078f60c7e8493629152e2e24dff9867394f34715a5d563077516e13d1f6dbf6007c6c8e4b40c8a3a153c727bd3b2c64d5f06d5072417b4470844ed8168c8a265d98d5024c8fbc575a65cfde149ed9276b21743697b4d0d4a68726751e48a381c3e4575c84ba400b8c27971023a6bd9179f978eb70afeb5151064f04d0e2aacd1e7dafe028ebaae803e1ffaac330a9a825ab917f93be681b9e5abf5a4f03bd1c4644bd172b4f6506e5f1bc867c0c25473375a48a8f78d50b4d2d5bcaaadd1a2ab1f2c54b78d23c425d1414d8353232a24a9ec94f1a893d081297a855060529af17427a508e666edade4bc4db00a1c15eae96cab25bfbba2ec543df37be2a1b530ea3679a31b00a7f7ffa74469c877d6585ea7258ad3341e820af3324d9d5c07bc35ea9dbc2afa9e075f229312e3f0fcbc9d2b5cd33712b3cd55c8cde432291e142e6bb3908cc1cf0fd1efafeb49e98296b914f9be7deb0f0178a745a184eb39bb2b04bd1"], 0x1e2) 19:39:46 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000180)=""/32, 0x20}], 0x3, &(0x7f0000000280)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0x3}, &(0x7f0000000200), &(0x7f0000000240)=0xfffffffffffff9c0, 0x8, 0x9, 0x5, 0x100, 0xe, 0x7}}], 0x58, 0x20000084}, 0x20000000) [ 1327.932726] audit: type=1400 audit(1658864386.915:159): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=17194 comm="syz-executor.4" 19:39:46 executing program 3: r0 = socket(0x25, 0x5, 0x0) r1 = socket(0x25, 0x5, 0x0) connect$l2tp6(r1, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x2}) 19:39:47 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffff8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000810) 19:39:47 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 19:39:47 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1e2) 19:39:47 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 19:39:47 executing program 3: r0 = socket(0x25, 0x5, 0x0) (async) r1 = socket(0x25, 0x5, 0x0) connect$l2tp6(r1, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x2}) 19:39:47 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000180)=""/32, 0x20}], 0x3, &(0x7f0000000280)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0x3}, &(0x7f0000000200), &(0x7f0000000240)=0xfffffffffffff9c0, 0x8, 0x9, 0x5, 0x100, 0xe, 0x7}}], 0x58, 0x20000084}, 0x20000000) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000180)=""/32, 0x20}], 0x3, &(0x7f0000000280)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0x3}, &(0x7f0000000200), &(0x7f0000000240)=0xfffffffffffff9c0, 0x8, 0x9, 0x5, 0x100, 0xe, 0x7}}], 0x58, 0x20000084}, 0x20000000) (async) [ 1328.059807] audit: type=1400 audit(1658864387.045:160): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exe[" pid=17216 comm="syz-executor.4" 19:39:47 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffff8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000810) 19:39:47 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1e2) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1e2) (async) 19:39:47 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 19:39:47 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 19:39:47 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000000c0)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={r2, 0x1}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000300)="c54314afe17cc05f8cf2c6348a3efaf2bdd1b885a5c6e01eef1cf87ca8f9792ccd0823e8fd4760d3fdd3766106b710e231d1bc3b7ec58fd49b7772fc071c24a3ace4add08c0013770bd58e037b9564eb258abe8b1db023de1302c77c0a86094df158c04a8fdd0647a0c799ef7f794538bb0f8a2f7f2a1cd156dce31110f67c50", 0x80}) [ 1328.161298] audit: type=1400 audit(1658864387.115:161): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exe[" pid=17229 comm="syz-executor.4" 19:39:47 executing program 3: r0 = socket(0x25, 0x5, 0x0) (async) r1 = socket(0x25, 0x5, 0x0) connect$l2tp6(r1, 0x0, 0x0) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x2}) 19:39:47 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="737461636b202f70726f632f746872656164ff73656c662f617474722f65786563001985e8ea5ba34945b1202d8e93fe8081dbad2d867334d613c9b58375d2edb7218eda63e9968060381ddfc0230aa51c4049c2cb757d"], 0x22) 19:39:47 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) 19:39:47 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) [ 1328.242081] audit: type=1400 audit(1658864387.215:162): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exe[" pid=17239 comm="syz-executor.4" 19:39:47 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x3f, 0x1000, 0x8, @local, @dev={0xfe, 0x80, '\x00', 0x11}, 0x40, 0x0, 0xa9, 0x9}}) 19:39:47 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x882, 0x6, 0x49, 0x7, 0x3, 0x1}, 0x1c) 19:39:47 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x111100) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x1}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:47 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000000c0)={r0}) (async) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={r2, 0x1}) (async) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000300)="c54314afe17cc05f8cf2c6348a3efaf2bdd1b885a5c6e01eef1cf87ca8f9792ccd0823e8fd4760d3fdd3766106b710e231d1bc3b7ec58fd49b7772fc071c24a3ace4add08c0013770bd58e037b9564eb258abe8b1db023de1302c77c0a86094df158c04a8fdd0647a0c799ef7f794538bb0f8a2f7f2a1cd156dce31110f67c50", 0x80}) 19:39:47 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="737461636b202f70726f632f746872656164ff73656c662f617474722f65786563001985e8ea5ba34945b1202d8e93fe8081dbad2d867334d613c9b58375d2edb7218eda63e9968060381ddfc0230aa51c4049c2cb757d"], 0x22) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="737461636b202f70726f632f746872656164ff73656c662f617474722f65786563001985e8ea5ba34945b1202d8e93fe8081dbad2d867334d613c9b58375d2edb7218eda63e9968060381ddfc0230aa51c4049c2cb757d"], 0x22) (async) [ 1328.361809] audit: type=1400 audit(1658864387.345:163): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=2F70726F632F746872656164FF73656C662F617474722F65786563 pid=17259 comm="syz-executor.4" 19:39:47 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x111100) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x1}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x111100) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x1}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) 19:39:47 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000000c0)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={r2, 0x1}) (async, rerun: 32) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000300)="c54314afe17cc05f8cf2c6348a3efaf2bdd1b885a5c6e01eef1cf87ca8f9792ccd0823e8fd4760d3fdd3766106b710e231d1bc3b7ec58fd49b7772fc071c24a3ace4add08c0013770bd58e037b9564eb258abe8b1db023de1302c77c0a86094df158c04a8fdd0647a0c799ef7f794538bb0f8a2f7f2a1cd156dce31110f67c50", 0x80}) 19:39:47 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x111100) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x1}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:47 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="737461636b202f70726f632f746872656164ff73656c662f617474722f65786563001985e8ea5ba34945b1202d8e93fe8081dbad2d867334d613c9b58375d2edb7218eda63e9968060381ddfc0230aa51c4049c2cb757d"], 0x22) 19:39:47 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="737461636b202f70726f632f746872656164ff73656c662f617474722f65786563001985e8ea5ba34945b1202d8e93fe8081dbad2d867334d613c9b58375d2edb7218eda63e9968060381ddfc0230aa51c4049c2cb757d"], 0x22) [ 1328.503186] audit: type=1400 audit(1658864387.485:164): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=2F70726F632F746872656164FF73656C662F617474722F65786563 pid=17279 comm="syz-executor.4" 19:39:47 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) socket(0x23, 0x2, 0xc2) 19:39:47 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x3f, 0x1000, 0x8, @local, @dev={0xfe, 0x80, '\x00', 0x11}, 0x40, 0x0, 0xa9, 0x9}}) socket(0x25, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x3f, 0x1000, 0x8, @local, @dev={0xfe, 0x80, '\x00', 0x11}, 0x40, 0x0, 0xa9, 0x9}}) (async) 19:39:47 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x6}}, 0x20) 19:39:47 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x5, 0x246441) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x8}) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:47 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000140)={r1, &(0x7f0000001180)=""/4092}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 1328.610694] audit: type=1400 audit(1658864387.595:165): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=2F70726F632F746872656164FF73656C662F617474722F65786563 pid=17298 comm="syz-executor.4" 19:39:47 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x6}}, 0x20) 19:39:47 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) socket(0x23, 0x2, 0xc2) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) socket(0x23, 0x2, 0xc2) (async) 19:39:47 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x5, 0x246441) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x8}) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x5, 0x246441) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x8}) (async) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) 19:39:47 executing program 2: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000180)=""/4096}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000080)={0x0, 0x10001}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) [ 1328.688784] audit: type=1400 audit(1658864387.625:166): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=2F70726F632F746872656164FF73656C662F617474722F65786563 pid=17299 comm="syz-executor.2" 19:39:47 executing program 3: r0 = socket(0x25, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x3f, 0x1000, 0x8, @local, @dev={0xfe, 0x80, '\x00', 0x11}, 0x40, 0x0, 0xa9, 0x9}}) socket(0x25, 0x5, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x3f, 0x1000, 0x8, @local, @dev={0xfe, 0x80, '\x00', 0x11}, 0x40, 0x0, 0xa9, 0x9}}) (async) 19:39:47 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x6}}, 0x20) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x6}}, 0x20) (async) 19:39:47 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:47 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x5, 0x246441) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x8}) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 19:39:47 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) socket(0x23, 0x2, 0xc2) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) socket(0x23, 0x2, 0xc2) (async) 19:39:47 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000000c0)={0x2, 0x0, [{0x4, 0x0, 0x1, [0x80, 0x9, 0x5, 0xffffffff, 0xf2, 0x66, 0x1, 0x6]}, {0xffff6062, 0x51, 0x71, [0x7, 0x9, 0xffff8000, 0x4, 0x4170, 0x3, 0x4, 0x1]}]}) 19:39:47 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:47 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) (fail_nth: 1) 19:39:47 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000000c0)={0x2, 0x0, [{0x4, 0x0, 0x1, [0x80, 0x9, 0x5, 0xffffffff, 0xf2, 0x66, 0x1, 0x6]}, {0xffff6062, 0x51, 0x71, [0x7, 0x9, 0xffff8000, 0x4, 0x4170, 0x3, 0x4, 0x1]}]}) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socket(0x25, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000000c0)={0x2, 0x0, [{0x4, 0x0, 0x1, [0x80, 0x9, 0x5, 0xffffffff, 0xf2, 0x66, 0x1, 0x6]}, {0xffff6062, 0x51, 0x71, [0x7, 0x9, 0xffff8000, 0x4, 0x4170, 0x3, 0x4, 0x1]}]}) (async) 19:39:47 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737461636b202f70726f632f0412f8fa94f7656cb008d28dd466040074745cd892fa467bfdea9606722f0000"], 0x22) 19:39:47 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) [ 1328.932119] FAULT_INJECTION: forcing a failure. [ 1328.932119] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.961996] CPU: 0 PID: 17372 Comm: syz-executor.2 Not tainted 4.14.289-syzkaller #0 [ 1328.969888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1328.979235] Call Trace: [ 1328.981820] dump_stack+0x1b2/0x281 [ 1328.985889] should_fail.cold+0x10a/0x149 [ 1328.990052] should_failslab+0xd6/0x130 [ 1328.994027] __kmalloc_track_caller+0x2bc/0x400 [ 1328.998789] ? proc_pid_attr_write+0x16c/0x320 [ 1329.003369] memdup_user+0x22/0xa0 [ 1329.006907] proc_pid_attr_write+0x16c/0x320 [ 1329.011320] __vfs_write+0xe4/0x630 [ 1329.014942] ? proc_pid_wchan+0xf0/0xf0 [ 1329.018908] ? __handle_mm_fault+0x80f/0x4620 [ 1329.023402] ? kernel_read+0x110/0x110 [ 1329.027295] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1329.032744] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1329.037761] vfs_write+0x17f/0x4d0 [ 1329.041299] SyS_write+0xf2/0x210 [ 1329.044746] ? SyS_read+0x210/0x210 [ 1329.048365] ? __do_page_fault+0x159/0xad0 [ 1329.052599] ? do_syscall_64+0x4c/0x640 [ 1329.056567] ? SyS_read+0x210/0x210 [ 1329.060186] do_syscall_64+0x1d5/0x640 [ 1329.064057] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1329.069226] RIP: 0033:0x7f8fedbcf209 [ 1329.073005] RSP: 002b:00007f8fec544168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 19:39:48 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737461636b202f70726f632f0412f8fa94f7656cb008d28dd466040074745cd892fa467bfdea9606722f0000"], 0x22) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737461636b202f70726f632f0412f8fa94f7656cb008d28dd466040074745cd892fa467bfdea9606722f0000"], 0x22) (async) 19:39:48 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:39:48 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000000c0)={0x2, 0x0, [{0x4, 0x0, 0x1, [0x80, 0x9, 0x5, 0xffffffff, 0xf2, 0x66, 0x1, 0x6]}, {0xffff6062, 0x51, 0x71, [0x7, 0x9, 0xffff8000, 0x4, 0x4170, 0x3, 0x4, 0x1]}]}) 19:39:48 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', ':\x00'}, 0x7) (fail_nth: 2) [ 1329.080706] RAX: ffffffffffffffda RBX: 00007f8fedce1f60 RCX: 00007f8fedbcf209 [ 1329.088204] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 0000000000000003 [ 1329.095468] RBP: 00007f8fec5441d0 R08: 0000000000000000 R09: 0000000000000000 [ 1329.102844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1329.110100] R13: 00007ffe45e97eff R14: 00007f8fec544300 R15: 0000000000022000 19:39:48 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = syz_open_dev$media(&(0x7f0000000180), 0x80000001, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000200)={0x6, 0x0, [{0x2, 0x5, 0x72d0, [0x4, 0x2, 0xfffffffd, 0xb61, 0xaa, 0xa4, 0x200, 0x80000001]}, {0x8, 0x731, 0x3, [0x2, 0xffffff9a, 0xfffffffa, 0x10000, 0x7fffffff, 0x8, 0x9, 0xb7a]}, {0x9756, 0x8, 0x4b6, [0x200, 0x0, 0x9, 0x7fffffff, 0x0, 0x7, 0x4, 0x4]}, {0x4, 0x0, 0x8, [0xeaae, 0x0, 0x9, 0x7, 0x77e, 0xc2cc, 0x6, 0x6]}, {0x4, 0x2, 0x4, [0x80, 0x7fff, 0x4, 0x0, 0x6, 0x81, 0xde, 0x7b]}, {0x78, 0x1, 0x1e72, [0x10000, 0x200, 0x1, 0x4, 0x8, 0x6, 0x8, 0x1]}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) 19:39:48 executing program 3: socket(0x1, 0x0, 0x803) 19:39:48 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) r1 = syz_open_dev$media(&(0x7f0000000180), 0x80000001, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000200)={0x6, 0x0, [{0x2, 0x5, 0x72d0, [0x4, 0x2, 0xfffffffd, 0xb61, 0xaa, 0xa4, 0x200, 0x80000001]}, {0x8, 0x731, 0x3, [0x2, 0xffffff9a, 0xfffffffa, 0x10000, 0x7fffffff, 0x8, 0x9, 0xb7a]}, {0x9756, 0x8, 0x4b6, [0x200, 0x0, 0x9, 0x7fffffff, 0x0, 0x7, 0x4, 0x4]}, {0x4, 0x0, 0x8, [0xeaae, 0x0, 0x9, 0x7, 0x77e, 0xc2cc, 0x6, 0x6]}, {0x4, 0x2, 0x4, [0x80, 0x7fff, 0x4, 0x0, 0x6, 0x81, 0xde, 0x7b]}, {0x78, 0x1, 0x1e72, [0x10000, 0x200, 0x1, 0x4, 0x8, 0x6, 0x8, 0x1]}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) 19:39:48 executing program 3: socket(0x1, 0x0, 0x803) 19:39:48 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737461636b202f70726f632f0412f8fa94f7656cb008d28dd466040074745cd892fa467bfdea9606722f0000"], 0x22) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737461636b202f70726f632f0412f8fa94f7656cb008d28dd466040074745cd892fa467bfdea9606722f0000"], 0x22) (async) [ 1329.213317] FAULT_INJECTION: forcing a failure. [ 1329.213317] name failslab, interval 1, probability 0, space 0, times 0 19:39:48 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={r0, 0x1, 0x5}) 19:39:48 executing program 3: socket(0x1, 0x0, 0x803) [ 1329.257320] CPU: 1 PID: 17402 Comm: syz-executor.2 Not tainted 4.14.289-syzkaller #0 [ 1329.265221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1329.274568] Call Trace: [ 1329.277153] dump_stack+0x1b2/0x281 [ 1329.280782] should_fail.cold+0x10a/0x149 [ 1329.284928] should_failslab+0xd6/0x130 [ 1329.288904] kmem_cache_alloc+0x28e/0x3c0 [ 1329.293051] prepare_creds+0x39/0x490 [ 1329.296865] aa_set_current_onexec+0x1e/0x200 [ 1329.301362] aa_change_profile+0x120e/0x2440 19:39:48 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 32) r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) (async) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={r0, 0x1, 0x5}) 19:39:48 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x26, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x201000, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xf) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100a00}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r6, 0x200}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01050005000600f300"/22], 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000000) [ 1329.305777] ? aa_change_hat+0xf60/0xf60 [ 1329.309835] ? depot_save_stack+0x10d/0x3f0 [ 1329.314158] ? __lock_acquire+0x5fc/0x3f20 [ 1329.318393] ? do_syscall_64+0x1d5/0x640 [ 1329.322543] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1329.327906] ? __lock_acquire+0x5fc/0x3f20 [ 1329.332246] apparmor_setprocattr+0x972/0xa80 [ 1329.336749] ? apparmor_cred_free+0x70/0x70 [ 1329.341069] ? aa_file_perm+0x2dd/0xab0 [ 1329.345041] ? proc_pid_attr_write+0x1c0/0x320 [ 1329.349627] ? __might_fault+0x177/0x1b0 [ 1329.353695] security_setprocattr+0x74/0xb0 19:39:48 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={r0, 0x1, 0x5}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) gettid() (async) sched_getaffinity(r0, 0x8, &(0x7f0000000000)) (async) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={r0, 0x1, 0x5}) (async) 19:39:48 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x26, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x201000, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xf) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100a00}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r6, 0x200}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01050005000600f300"/22], 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000000) [ 1329.358019] proc_pid_attr_write+0x22b/0x320 [ 1329.362427] __vfs_write+0xe4/0x630 [ 1329.366309] ? proc_pid_wchan+0xf0/0xf0 [ 1329.370279] ? __handle_mm_fault+0x80f/0x4620 [ 1329.374777] ? kernel_read+0x110/0x110 [ 1329.378672] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1329.384117] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1329.389144] vfs_write+0x17f/0x4d0 [ 1329.392692] SyS_write+0xf2/0x210 [ 1329.396143] ? SyS_read+0x210/0x210 [ 1329.399762] ? __do_page_fault+0x159/0xad0 [ 1329.403998] ? do_syscall_64+0x4c/0x640 [ 1329.407968] ? SyS_read+0x210/0x210 [ 1329.411598] do_syscall_64+0x1d5/0x640 [ 1329.415492] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1329.420673] RIP: 0033:0x7f8fedbcf209 [ 1329.424379] RSP: 002b:00007f8fec544168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1329.432081] RAX: ffffffffffffffda RBX: 00007f8fedce1f60 RCX: 00007f8fedbcf209 [ 1329.439352] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 0000000000000003 [ 1329.446616] RBP: 00007f8fec5441d0 R08: 0000000000000000 R09: 0000000000000000 [ 1329.453879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1329.461135] R13: 00007ffe45e97eff R14: 00007f8fec544300 R15: 0000000000022000 [ 1329.520422] AppArmor WARN aa_audit_file: ((!((&sa)->apparmor_audit_data)->request)): [ 1329.520616] ------------[ cut here ]------------ [ 1329.533343] WARNING: CPU: 0 PID: 17402 at security/apparmor/file.c:136 aa_audit_file.cold+0x18/0x4f [ 1329.542615] Kernel panic - not syncing: panic_on_warn set ... [ 1329.542615] [ 1329.549953] CPU: 0 PID: 17402 Comm: syz-executor.2 Not tainted 4.14.289-syzkaller #0 [ 1329.557850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 1329.567179] Call Trace: [ 1329.569744] dump_stack+0x1b2/0x281 [ 1329.573351] panic+0x1f9/0x42d [ 1329.576525] ? add_taint.cold+0x16/0x16 [ 1329.580479] ? aa_audit_file.cold+0x18/0x4f [ 1329.584863] ? __warn.cold+0x5/0x44 [ 1329.588468] ? aa_audit_file.cold+0x18/0x4f [ 1329.592785] __warn.cold+0x20/0x44 [ 1329.596301] ? ist_end_non_atomic+0x10/0x10 [ 1329.600601] ? aa_audit_file.cold+0x18/0x4f [ 1329.604900] report_bug+0x208/0x250 [ 1329.608504] do_error_trap+0x195/0x2d0 [ 1329.612365] ? math_error+0x2d0/0x2d0 [ 1329.616146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1329.620972] invalid_op+0x1b/0x40 [ 1329.624414] RIP: 0010:aa_audit_file.cold+0x18/0x4f [ 1329.629313] RSP: 0018:ffff8880af89f7c8 EFLAGS: 00010282 [ 1329.634659] RAX: 0000000000000049 RBX: 1ffff11015f13efc RCX: 0000000000000000 [ 1329.641903] RDX: 0000000000040000 RSI: ffffffff814430d0 RDI: ffffed1015f13eef [ 1329.649164] RBP: ffff8880af89f9f0 R08: 0000000000000049 R09: 0000000000000000 [ 1329.656416] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff4 [ 1329.663663] R13: ffff88823f8bd680 R14: ffff8880af89f840 R15: 0000000000000000 [ 1329.670923] ? vprintk_func+0x60/0x160 [ 1329.674796] ? aa_audit_file.cold+0x18/0x4f [ 1329.679192] ? file_audit_cb+0x670/0x670 [ 1329.683248] ? prepare_creds+0x39/0x490 [ 1329.687201] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1329.692630] ? prepare_creds+0x3c9/0x490 [ 1329.696667] aa_change_profile+0xcd3/0x2440 [ 1329.701063] ? aa_change_hat+0xf60/0xf60 [ 1329.705107] ? depot_save_stack+0x10d/0x3f0 [ 1329.709410] ? __lock_acquire+0x5fc/0x3f20 [ 1329.713621] ? do_syscall_64+0x1d5/0x640 [ 1329.717670] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1329.723097] ? __lock_acquire+0x5fc/0x3f20 [ 1329.727313] apparmor_setprocattr+0x972/0xa80 [ 1329.731798] ? apparmor_cred_free+0x70/0x70 [ 1329.736112] ? aa_file_perm+0x2dd/0xab0 [ 1329.740067] ? proc_pid_attr_write+0x1c0/0x320 [ 1329.744629] ? __might_fault+0x177/0x1b0 [ 1329.748753] security_setprocattr+0x74/0xb0 [ 1329.753063] proc_pid_attr_write+0x22b/0x320 [ 1329.757464] __vfs_write+0xe4/0x630 [ 1329.761069] ? proc_pid_wchan+0xf0/0xf0 [ 1329.765021] ? __handle_mm_fault+0x80f/0x4620 [ 1329.769493] ? kernel_read+0x110/0x110 [ 1329.777875] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1329.783301] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1329.788305] vfs_write+0x17f/0x4d0 [ 1329.791820] SyS_write+0xf2/0x210 [ 1329.795273] ? SyS_read+0x210/0x210 [ 1329.798879] ? __do_page_fault+0x159/0xad0 [ 1329.803103] ? do_syscall_64+0x4c/0x640 [ 1329.807070] ? SyS_read+0x210/0x210 [ 1329.810685] do_syscall_64+0x1d5/0x640 [ 1329.814574] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1329.819757] RIP: 0033:0x7f8fedbcf209 [ 1329.823450] RSP: 002b:00007f8fec544168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1329.831135] RAX: ffffffffffffffda RBX: 00007f8fedce1f60 RCX: 00007f8fedbcf209 [ 1329.838382] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 0000000000000003 [ 1329.845627] RBP: 00007f8fec5441d0 R08: 0000000000000000 R09: 0000000000000000 [ 1329.853048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1329.860384] R13: 00007ffe45e97eff R14: 00007f8fec544300 R15: 0000000000022000 [ 1329.867994] Kernel Offset: disabled [ 1329.871654] Rebooting in 86400 seconds..